MAL-2025-142010 Malicious code in eleventy-query-xanadu-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadd90b72ea87821d2c13a93d120437c6c61285fa9ff825b18799a960481a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146053 Malicious code in pegasus-spectron-jupiter-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bfa4b5df1c46dd1bfc2e3815bfe4db8d08c1fe68806f1e59c00c752993757a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147885 Malicious code in sequelize-webpack-electron-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c6cef0d1f5fa1940739aefd12c411b829bbad3d9b0e3e28cb1c8356f08516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140201 Malicious code in bulma-airbnb-node-sass-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05b2ac08868e6c7fd670b15b48fec5a3be342154aa5b9a86612c8413c16242a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139648 Malicious code in atlas-mdx-pyxis-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5d4a569c36cb93cfe22fb3e8dcdf66e0ee3ba72263a1ec085f04238964a5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141194 Malicious code in cosmiconfig-prettier-stylelint-centaurus-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2b3af4f75fa5fb6640299c10d355b8a8184131a97251ab5b51ba36f1474cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140204 Malicious code in bulma-ariel-cosmos-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9a031357d89d2dfe40980d684f3f5c40ecca9c64aeb861f1ddb1f55ea277ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145700 Malicious code in nuxtjs-colors-update-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847798a82aa947d6f56ab6201b37c9bb6fd5b2e9a8f27f39d89c287bb9059747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146158 Malicious code in phoebe-lyra-jovian-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc32ebc49eb4d0ea415043871829bf5692929f674c9417fe1b4e19bb5d15324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146680 Malicious code in protractor-dactyl-nightmare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25eb547f2c0710a4ca734107b39b3538297761f961c0a01fdf10bf7fd50975a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144057 Malicious code in jupiter-hexo-nestjs-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52307fbec88a4359738f1a4633c61900298bd8f2ce42dfa1b7e7cfc137ada7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140963 Malicious code in commitlint-config-angular-ganymede-nodejs-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfd879ab632f0dd68339b7adf07134b5953b4df890f07de2df9bb6408002bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143480 Malicious code in hyperion-janus-install-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1da56dfbaf426b14061db0d5d88f995bbf095fc244d4628fc777d9f7a637de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139570 Malicious code in arcturus-ignite-csrf-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e3b9ed32ae320ad1acddea3e3a6cbb09e432ca21542a11792b20e4b4eb6fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146815 Malicious code in publish-spectron-europa-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109c0af3a14167896afac3e991da3b3f5fc640bdb673e433085122320a2f2b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148750 Malicious code in tool-quark-andromeda-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a080ba590ad542c293ea5b3d7625e0f1ca1119818b77c409f20bc816283d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148754 Malicious code in tool-spectron-flare-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bedb9911b41711fcf4f6c6e7513c584bcce63553d1287bed2b66b9ea07353f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147968 Malicious code in sirius-prettier-stylelint-dotenv-parse-variables-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611e5e66a2dadc8e4f679552552d528775057968cb7051d625d46e870b5fd204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149449 Malicious code in weywot-xanadu-yaml-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af256ea19ec7939f7d812a35ccd8b4063717d2babec01599fb27e8c8eab0868c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147381 Malicious code in restart-event-achernar-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac912a9e6563acba040b90c2a303533a4de514b4fe057f48522d0bcdea9bca1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...