MAL-2025-145602 Malicious code in non-blocking-apollo-proxima-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075b4ab62f509004731e1c2bd1277e8fbd04dc6618024de17b3e217fe8e76e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142662 Malicious code in fornax-wezen-celeste-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f48cfa36fc13439057ca8acb57b8ad7788370235a7ca5a7a31780179d367ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142638 Malicious code in fornax-miranda-dotenv-parse-variables-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5daaca5d8d981787420bdbbc174f4e8024aff81ca636c0c7c87a2a68d4f315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145427 Malicious code in nextjs-xml-yaml-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0671b2be9d6650ff8c43e98f38d0c53b0646276240a6657802b68ebbc5153381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146803 Malicious code in publish-polaris-graphql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9622c156d137c3da2d50e621520c1214571a89d839cf468ef5f1e2e5d6d8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143659 Malicious code in inquirer-remark-upgrade-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8f4bdb1f8f040e33ec40f663df8fe7c86704238205484e4164f4e960b24070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149185 Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147510 Malicious code in rollup-plugin-callisto-figures-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139591 Malicious code in ariel-mocha-blaze-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bb813f3180d8c2a3d291e70bc1cea255754fd1747760b8056687de594dea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139223 Malicious code in aether-antares-nuxtjs-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea1a1140aa617b23f10af3e5f342168ca2ffa2f4239a65643f7b7a1a47e3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141087 Malicious code in convict-rate-limiter-semantic-release-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145928 Malicious code in package-dorado-soap-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b38f17b94afc1f0a49b05fdd81a89481ec54c066a14a193744a88e76b8944fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147273 Malicious code in repository-mdx-init-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a54f154ee893d7c612bccc459d3b27c420ea729fdc420864cca5b527a96b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140496 Malicious code in castor-spinner-async-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7ffb45dc2db3ff1f356c7e393e67f1de1d339af5165815c7bc65a9702f209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142744 Malicious code in fusion-publish-nightwatch-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcca2c8af5be2035ff5c2b2d412451754bca41be038356ac20f6c88d7c175ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139170 Malicious code in acamar-css-loader-style-loader-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3ed716972d5290f3c88b1d1e9ce21f40cd4f788fc0787cdad21f76eb2590e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143044 Malicious code in gridsome-hapi-comet-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd3cac8edaa9ec5304601d2065302dc6a788f5a38d89ce31ff3053d2f348b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142610 Malicious code in fornax-centauri-ceres-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4292f5a1b31a9d321a2eb9d21512f8235d0431796f54ab26eaf817f2c15b8d92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141184 Malicious code in cosmiconfig-hexo-blitz-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44be45fdde61cdce0f1f9666eb2a13f985e7e09710708a60db96f21303c6011c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145547 Malicious code in node-sass-magellan-mongodb-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5219e3fb0d56abde1dc3b799139abbef4f1eb1b65d940883d6bf200f233d4364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...