MAL-2025-144515 Malicious code in loglevel-mensa-pegasus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2afc3e2aee8b3966ed7531a5d556897d37bc1bdf1d7ad73a0850368bc5bc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-config-fork-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893df40a746a89d4d64ef239e7ba6265dd6d0d5a966591c11ffbd8f4c401280e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-websockets-apollo-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181d5bf8f8e773b12665333b95e60d88264ca346871341c8131c2f24facc5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144708 Malicious code in markdown-pdf-sqlite-zephyr-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195291aa189c6bfdaa7f3956ee1401e30637c563743c36d71d9c6e0cd6aa28d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146817 Malicious code in publish-stream-radiant-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017d207c1d0a9323b05f24974015e02bb9f98d35f470de400a2f2b78c0d893b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142087 Malicious code in envconfig-triton-perseus-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868015b1b813739061cff576bd6f2c640eb715630e7893b555ca36dfaedef583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140993 Malicious code in commitlint-miranda-express-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6c9729e5c963e5d34a195722b7e5ab7ca83819c63665ef44c1069c6b8d8b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142648 Malicious code in fornax-quark-meteor-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59bdf86a84f5036729f986f0bb084f669d9198a4e0f0560315f8725e29489476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148309 Malicious code in stop-zenith-auriga-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774ad1faf3276b16e95b19b4ded1237a9ae68be920fcb594731cbca811253b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143103 Malicious code in grus-taurus-xml-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e782c2cef1bcf90360829c12b7ce209eb5f9d611d67600c686d34187ee7b16e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144724 Malicious code in markdownlint-phoebe-aquarius-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bc05a74a579980324723e78032930d587d6d67a1b120c30a59e228eeb4a720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143625 Malicious code in init-ignite-weywot-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9435d37d2057594780571c2451cb4e414f443dab9fd48fb27840ec7314ddcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141712 Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9886a1cb7d0a2d8eca7761b048b1101fb32a1a735646becbb7e5445a2bd2e4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149091 Malicious code in vega-io-prettier-stylelint-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdba254f331a198ad29d4f9ac5c0b302bbe4413db07312639d2a4882d8bc2c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147388 Malicious code in restart-ophiuchus-mensa-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb41da6b1204b68543c531905c89b825e2ee0559eaeb908efae9b13ceca35d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140876 Malicious code in comet-gacrux-pm2-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7729116efe483cf849c752a73e89d5216af77a6872c275da676077adbf09f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141768 Malicious code in dotenv-safe-parcel-convict-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3887411420b633571876d73bdc8d64a712e76bcccdfd293ea444bddc36a38c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144573 Malicious code in luna-nightwatch-pegasus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab6ea5a396a6500f417c6d9ecb7bb5989b853bcddffe2bdc20f3e8bd6592c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140659 Malicious code in chalk-ursa-leda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6ec642046a778fe5cd41330acbc46e330ab9944a2ca56be7bd85413f74fbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-mutation-lyra-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1a8778a9919d1bf804f1ffc224052d3b82fa960b4e13abb3c34bc2b1c21a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...