MAL-2025-148690 Malicious code in titan-pegasus-transport-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10990bdbf8ebcca8bcc01d9ba3c1ab248f0efbb2723319e0abfb784fcd048416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146387 Malicious code in postcss-eslint-semantic-ui-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0f9a98498be315aa619608d786350a8e498f80693205f92a211b1ce4ca3f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141716 Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142234 Malicious code in eslint-plugin-nightwatch-javascript-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b333ff43ee1f9be398cf888d133ef6f16c4abeb587460d88c4ae7d5a8173469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143410 Malicious code in husky-backend-jovian-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fb4816498eab7cafc0d93672a74a76721f2a2f23303cb6d53ef05824210e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148533 Malicious code in terser-private-element-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256a58de5656427ce43274a191ffc9eef82d97edfae23fa63c7f134e0113a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146974 Malicious code in query-nconf-jekyll-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d0fc63dc21894114714a30fe30cff98bf7a4269faab536cc5cfd3dc729ee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145440 Malicious code in nightmare-nebula-axios-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2597649307233fc7e02c398dd6aa688e4964b170be8ec32aeaf0852589d735e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141841 Malicious code in dynamo-ursa-soap-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c42154cb3d3d4f013e199a8286637184259cc713fcc3019d47b1fba096b9e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147168 Malicious code in rehype-eris-algol-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa52e77988c744b88131fd41aa547759e2c6ce9957fddcc2632329184357735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148727 Malicious code in tool-andromeda-kinetic-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd6d024ed78c25836f75684b27d647a8f118519dabf7f00a4d1a5feecaf5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146136 Malicious code in phenomic-json-nodejs-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e01dead8d8853b5795ad6a7c6064b9c62e43df2d92bce5cd0c4644461caa69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148672 Malicious code in titan-buffer-sagitta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd25da2ea12c17bfcc8b82c1f080529ed705b80141907868b255187769fd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148604 Malicious code in testcafe-sass-loader-morgan-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141498 Malicious code in deimos-juno-sails-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e4b06a4470db17fd32754a1e07a0049aa27cd7bbe27db48e0a893f47e90d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144723 Malicious code in markdownlint-lacerta-solis-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a350fe7ddc11ca9a567e3847734b551ccef89edc4b2674c0c9470a0aaef37b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142974 Malicious code in got-antares-jest-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1574c432ca6f79ac02267947c03993a142d4617d78594c0ad0cdcee8f052011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143182 Malicious code in hapi-dynamo-janus-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77ec975125b6a288a6fd1ecc2cf29882839c1001107382b5ea3e6cb491ef263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142022 Malicious code in enceladus-auth0-leda-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ff5904ea8b5f8c969aa7052d1caef7be492c7bb6abe7cb68d1251dddb5d6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141485 Malicious code in dagda-scripts-callisto-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65067c64696414d0b4da2d866416a0e37392a25616c759a9d4a8d485e05a5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...