MAL-2025-140368 Malicious code in canopus-phoebe-electron-builder-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36eeabd19bdeac8a1ef874d116c625c345e5f293b115ed04241d7f4b9e3d9df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142598 Malicious code in fork-semantic-ui-version-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372c76cc70f8da88e2d298a38b2447c9e13d94d109ceff0367639fab6769f174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144756 Malicious code in materialize-spinner-superagent-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c569a14bb5035377c221313c418b1c79724b1e26641bc2a9027efc4adbde6eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148672 Malicious code in titan-buffer-sagitta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd25da2ea12c17bfcc8b82c1f080529ed705b80141907868b255187769fd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143894 Malicious code in javascript-umbriel-kronos-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00f1ebe329c4b4ab18fc494517cb4ec5ee2e7059ff770fd9aa2d251d5b5c0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143581 Malicious code in ini-apex-ursa-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db345a3df99f8640bcf7211fc77cc9d6d6a65310f8165ea42480bd60fdd7f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142011 Malicious code in eleventy-remark-jwt-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc239a2ed1afe79b7aebfbbb3f1af622f246000016a43b3cd5e61154f7b71eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141024 Malicious code in config-ganymede-hugo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972c4937b0a1a11715489b02260c4d19fd928a94e7a408ded4575366da6e0fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139546 Malicious code in aquarius-rocket-vuepress-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92eb8e6b2794182f84ca60ac2dd4533e6e10d51086559a89fad109487b8f4d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141962 Malicious code in element-ui-ceres-aquarius-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54814dfe23a781cb3e4bd646a7076f4328a131fa2f85effb56c7c81ba91163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140602 Malicious code in chai-procyon-postcss-loader-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb383055d39ccf72e511de623d5b1555ea9a47f86d90567d3f808175b6d3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147844 Malicious code in semantic-ui-dione-graphql-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53702f4357ae4812cdd90f852efcc1e208cdb37c1d724570bfc11046a3a0dfbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147743 Malicious code in scripts-prompts-umbra-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba22ce91ec22f2e93dc7bbe56182d55412ebd2d3f58283ca919fa625c80e26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140396 Malicious code in capella-rocket-io-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc3c5393b7fed0671dbe77da2928e386acbcc6663d85e74b8de4a915d0a5dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141474 Malicious code in dagda-jabbah-xenos-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678aea84d3e17daf26a71a1227863e69cfc430bb5d394a840da880b8ae787a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139591 Malicious code in ariel-mocha-blaze-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bb813f3180d8c2a3d291e70bc1cea255754fd1747760b8056687de594dea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146976 Malicious code in query-release-it-pulsar-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9d68133cc11dd8c7ad4eb57b193d34b5c67018ac38ae8f791739da62bed77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146803 Malicious code in publish-polaris-graphql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9622c156d137c3da2d50e621520c1214571a89d839cf468ef5f1e2e5d6d8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140622 Malicious code in chakra-ui-nodemon-gridsome-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ff566ea2abc806da64457f68e93782465c69d4c39c8050633cf66e6ff174f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147831 Malicious code in semantic-release-loglevel-mongoose-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...