MAL-2025-140400 Malicious code in capella-wolf-testcafe-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295c79a4035522fd16a4d1ae5bc9c674fe03ec774676b7dce77dfea5c68238c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146981 Malicious code in query-toml-mongodb-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ccaa2ebfe16419da2c790aab04492f0b9cc5ca3df72aeabe287589dfcf607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144042 Malicious code in juno-unuk-indus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefc777df30f65493f2c63a279abb6952249875a9d4a6558de667af648f650c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143925 Malicious code in jest-heka-wasat-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04249879ac576d79fc9e7765efb7d944f2ea8639c65cc9aad3dba332dcfc98a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147668 Malicious code in sass-loader-gatsby-chariklo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2804dde5b9b11f556c7eab05fa8ad604437bd20aea188b9c0811d8bcea02e17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140083 Malicious code in bootes-magellan-yakutsk-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d9eed43e2a4dae5f0ed3a05e412b53eb3228b4172ed85073a6b50778c948eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144623 Malicious code in magellan-auth0-markdownlint-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4110e4c3e1416d8249708d1df17172ba965f24d7fbe642c942883e8c886adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139658 Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141970 Malicious code in element-ui-html-webpack-plugin-impulse-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5363694bac4371cfc54011da12618a13ca07cb0b648c0243aacb32b1f569d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142646 Malicious code in fornax-promise-less-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc474568ab6ea1c4a33328711e82d6c2c1af6eefa3436ba7ab3702f46c427ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147613 Malicious code in sagitta-quark-browserify-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd0e447d1df55cb8dfc1d3a02be155fb47b264e13fa88878c6fc14b5d2ecbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143376 Malicious code in html-webpack-plugin-wasat-fornax-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b11210d9eda121cf11eccb91860419ad970b15ca9cd114ec8df21e82196e205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143645 Malicious code in inquirer-despina-arcturus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625a76d2fe405521045ff04e3a23711f2a1d079e585b4c732d16f3b5da957c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144978 Malicious code in mini-css-extract-plugin-library-proxima-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3f715b18edb7e7d0228ac0c8105bac6636ede21cbe66c0edc5f64b8d961d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146780 Malicious code in publish-concurrently-gacrux-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2cfe0c3e58ae6358bb280c4b65e3b0a5ad1a578037814733f4f7581aa92c89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140218 Malicious code in bulma-middleware-procyon-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2da90094f5a03de39c5fd357369364e0b32f35ff16c2eb61f23441b9e23f3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147704 Malicious code in scorpius-centauri-europa-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf6a2a4415d58b5c60093c25d385b84511272149ac38e3a8500e2be1907eb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142762 Malicious code in gacrux-dagda-electron-builder-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 432e6d6f4732176d1bb27e4248a3a9d354d57b424590358f70ac658dd3b40a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140994 Malicious code in commitlint-readable-standard-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee74897cb470305c5a181b7888799edaf5856fa3361abf88d8a8e2f0f78bbb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145316 Malicious code in nconf-europa-norma-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a1fc6ccad57d3555ce37c8d74db61a1de6b6ebf80c58455ad362ba65edf829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...