MAL-2025-139697 Malicious code in aurora-chai-csrf-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e4dc3022282cffa8ced96920d3d0caeb5bb7cc58760e52b23ba6bf5e3742c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144684 Malicious code in markdown-morgan-aether-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760c98b04e7959bfeddbd8736fd9449113cf66e31d4730bb3f8b6dba48e44c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144819 Malicious code in meissa-ophiuchus-less-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8518a814cafbac1fe3b24bde9c440231a89ec97e3377a71c305e1bb5c795f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148204 Malicious code in spinner-node-config-sync-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c53e550c282796bdb8410e7fc43c015ffa0b924311c3921e6542818028eee58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143785 Malicious code in jabbah-nuxtjs-spica-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c6404a455bb29d3f9893290050e6e8982e6a5dbc7c9429a4f25827345da287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144945 Malicious code in middleware-antares-bulma-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a195dc12e34bcddfd2b5e36d9a5c748024e53f940af3a3b5ec6ee8f472a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142017 Malicious code in eleventy-zephyr-radiant-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4a463214a6d29227a8b2bb4dac63d4fca7441f0fbeaa2be1c26ea58499fc85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140604 Malicious code in chai-pulsar-carpo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148162 Malicious code in spica-jovian-norma-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c30e9124ef655dba4f9474ca074d53809713d42b208787ccf31a36ef7a4e329a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147976 Malicious code in sirius-rollup-despina-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa05f73f303538e8cd6f0ac16009ddabcf7a71a2bb068c2a2ff4856715ddf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141185 Malicious code in cosmiconfig-jovian-husky-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24159d35cd206dc42cb00bd266437465efeecc6083e43f4257bb6abf407b3b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139206 Malicious code in adonis-antd-delphinus-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67bc0a1707357c9d466d2e7d4f959011260827b16ffde920d633c65f07fb536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145491 Malicious code in nightwatch-triton-chromedriver-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963effceb0d337e9917a274606d2d06dfb6f477b03d1d27072955f2c53759913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148458 Malicious code in taurus-antares-child-process-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe0fc485095fad750a070495da9a88aa78c72c33bcffa9c5000b8fd69e760da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148842 Malicious code in typeorm-css-loader-draco-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0ab1c14dfa80189445ccdea78b141d5d38eeef4d772c4e65ddad170d2022ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140816 Malicious code in cli-vuepress-html-webpack-plugin-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2432237f1723a37335764ec0a92fa5b96656aaf81ad501680076a8e1b4d646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140392 Malicious code in capella-meissa-chakra-ui-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d859cb2764f8b3a39fa333e103e88f965fa0aace5be1b50ec0f1f2899495610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147156 Malicious code in regulus-remark-achernar-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddfcf72846e3067c595237cd37d51c7e34b6ba2449aea6d0f09e94d187593fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142346 Malicious code in exec-jekyll-redis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebe6769e033cdb34c98efd5c14365847f4e0ad6fd40b98d87aead05ce274857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146495 Malicious code in prettier-plugin-markdown-sedna-sagitta-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458b40a7e21ed9c73ea33d3e2828ad4a708c2484f3fe0ba8a02d4a89de882286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...