MAL-2025-141688 Malicious code in dorado-ignite-kronos-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66abf121dfd2cc9376e533592688a982b3b97fa45c1a65d3d4d3d85a8e1cac52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143449 Malicious code in hydra-pavo-taurus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15061f0cc0e121caaff0c51e817e1426d95c40b7d140db63c1f74c738cea90d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142314 Malicious code in event-html-webpack-plugin-json-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875e00bfa3e1b4edd4e8060b916a67fb8cd83337e82e497bc92c17e79e411199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139556 Malicious code in aquarius-venus-nodejs-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc2e66c5e746f8022215dc50cec9024ea7c7a0932e369c235ebe321beb13fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142843 Malicious code in gatsby-fork-soap-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73e7a65de6af65020a1c45f76329317657d4f7569beaffbfa56f0471cd8adbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148395 Malicious code in supervisor-lint-staged-nebula-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f90e24f78db58b9fff6195aa59ba8057d8a2f471f79ef9eb526355fbcfc2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149092 Malicious code in vega-jest-leda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97bcabc2b8fcfc5de703127ae1c9a7161c8f7d69c0fd95ffbecaf28045c4da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139724 Malicious code in auth-middleware-phoebe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3e51978571ca4dfff349d756ffbe01b1a5025c948ec27206dac4551be7b695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139474 Malicious code in apex-castor-gridsome-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9838df6fb8cb5dd397939668d3b47a828bd69186f05c69811ecc477154c170da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147598 Malicious code in sagitta-helmet-vuepress-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca2a0f227ecf5dbd238bdb4fdf614d28c9f11da0fb859e447e77910ac1e113f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148238 Malicious code in sqlite-run-script-transform-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155890993439b256e12a4554626a807e3653c3636884abfe6e3000631856f1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140063 Malicious code in blitz-tailwindcss-json-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6717ec68ba9ab458bd15bd7723e2855842fe4ad35f81756da54693198f24091f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145919 Malicious code in orbit-xanthus-apollo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924c714b8a65d6204a62110d0e88de54f38146b9a5979c8a228f0cbfb5b016e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147014 Malicious code in radiant-equinox-pm2-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfdbb60037d98cb4076c74dcd46b2323884f2253eb379e85db9ad413affc169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147723 Malicious code in scorpius-yaml-ignite-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb26d44d2898df0a6ccdd6b1b5623f9f5e5a5d9e158848b37bc4af1d4ad9f6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141095 Malicious code in cordelia-ceres-passport-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61ddd43b0b5a9bbf637daacd7159288a1f95ab53514e330058ed7713051c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146241 Malicious code in pino-pretty-package-markdown-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952b16eb60ed03681c44abafcaf46dd32e31af7ccc4d8fcdaf9149f4c1ceb47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146200 Malicious code in phoenix-lint-staged-auth-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb9f820a980eb156d3ff985ab85292fd261b3407f266fb93b0a158d2adb95784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146175 Malicious code in phoebe-rehype-style-loader-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd9c68db65094df4f1ff7de4e1846f61961d90dbd20b968662d96ff11894c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142454 Malicious code in fetch-puppeteer-bootstrap-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d248a37df924c5732ed78f24710c8e3e7b59c53070665ec404139d9faec68be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...