MAL-2025-149085 Malicious code in vega-callisto-apex-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbed3cfe68e3a74b472ac88faa9c8d2bf8dd3dd2614d6a118bed34e17c7d1c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149156 Malicious code in virgo-global-superagent-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8563f28a2a27d7861250bad8476d45d2682ca1232f97b8792980d923d60542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144769 Malicious code in mdx-markdown-pdf-andromeda-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a929f851587f1d3c868fb0aec364a24cfc338af4c53ac9f28a5368f884487eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149871 Malicious code in zenobia-redis-inquirer-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62577692ad5350d3327022ce9fd34ed152f4a6dc7818c1977c932084039feb75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-karma-lynx-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05e1e5527ea26a244d15e0aa5a7e08fb9668682cb3c6840370ec54b8aafc6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-kronos-miranda-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae16a3a44c1202bba281e9ce9367fef3c378fc7b5a59c16eb3b020c2ee73510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142502 Malicious code in firebase-materialize-morgan-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c444fbf2a36d713c252f259fbddfccb959e738bcd08fbe47992b6bdb5d7ea552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145782 Malicious code in octans-transport-parcel-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f861ca8dc68e2483be5dc5e3fdafa633fc9d3dfb50747bd13e6decdf733fff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146876 Malicious code in pyxis-eclipse-mysql-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e1ee2fc463e47934604c30abeaa1ca76f73607788e0c7cbf0682047489e488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149261 Malicious code in warp-avior-html-webpack-plugin-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11f9b6bfc7e569e71fb19a7e5a3323ecd22de9a47e30dbccd610e408eebd4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143182 Malicious code in hapi-dynamo-janus-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77ec975125b6a288a6fd1ecc2cf29882839c1001107382b5ea3e6cb491ef263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148604 Malicious code in testcafe-sass-loader-morgan-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143488 Malicious code in hyperion-mocha-start-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8b887874b9898ac0f6e0f183bc4dee8c0d7a569bb6ad9dd7ef8d6ebeefbed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-install-global-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b312c96b134e33169689e7078f37ab23390dbb17c7e278ee6a0d2054c08074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141442 Malicious code in dactyl-foundation-deneb-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c702b6dd34c82f1f31c9bb8c48269dab9e7a0d5f55905e6e7726ee273f67b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143616 Malicious code in init-carpo-kastra-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c64d1fb27cba87ba646d04d099537d85a8a5c7d5ff55ada320a56a2e70b9798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141393 Malicious code in cypress-blitz-typeorm-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fd9a3511b91a8ee654005a6e729410f36be69ce140d11fcd0dc6ebdc400290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141920 Malicious code in electron-hugo-link-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f100f8b5a13d11ccdf9de9d337b8202eda41ec541af1a521b3ae2e6fe73503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145233 Malicious code in mutation-tailwindcss-websockets-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab3ce79ab60b14a507ea4301474169e43aae698fb034ca86bd2c14bb260fd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143326 Malicious code in hermes-sagitta-galaxy-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec90e40f5de6e680a929f98fcd6ed7c4d495f7270f6eba14f7bd2b81c596d7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...