MAL-2025-140988 Malicious code in commitlint-hyperion-morgan-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8b017e87cab1331f2b8c026fb02605c014ba3e727b00836a191223d6e44a80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141235 Malicious code in cressida-ini-markdownlint-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65662cda736d980784b56270f444cf897c757c5fde067bd14ebded2277d2d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145056 Malicious code in miranda-rigel-webdriver-manager-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bdc0dfd44e9ef24f1f26a65a9dde8fe116137932c6a13652c8544024480f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-chakra-ui-loopback-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab747ea739dd91961c6a25997e6d9ab061a1747a579280701e16f99aa599da91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141774 Malicious code in dotenv-safe-quito-sagitta-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bd17f282b80e518fd36af5bd8237ddb4c4be6a734607ebdcbbb5d20ec0adee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142354 Malicious code in exec-nestjs-request-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e72addbe7ca43e486f1bf024c753f5b5a2fcc5d9d1ddecf6e7c75fd7c238ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146566 Malicious code in process-rehype-gatsby-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0780d7012eb1afbde0ac9c67aee135245e3ebfca73d5a8a0d167e0dd47bc747e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139759 Malicious code in auth0-style-loader-polaris-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017babb992767ee4824521e3abb64ee04ac53ee11d2883e77db12c39112dbb76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144183 Malicious code in kinetic-redis-less-loader-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8d3a75b7951bf3e14a2ac494223afe6699bc3b3716dd22cc8a38c9ed9ddc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-public-duplex-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f422943fe3cef6b3cf3df7c0bed6e35e4aa3dd409f102bbb8f9a3cc30a16253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143775 Malicious code in jabbah-despina-ganymede-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08487eae01616838ee0af25f1ec0f33d36b67a802b28b68bd65cce837dd8369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145841 Malicious code in ophiuchus-sedna-ariel-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61001b423af9afb8ea8b076b4c05b7e15374124cf3dbb5d8a90c58906b6b60a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142679 Malicious code in framework-dynamo-react-bootstrap-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de049a6db6a95c67a2bc0734868704264651f3b278204b15e772e2e7561182d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145050 Malicious code in miranda-procyon-bulma-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0a40a496ba5fb94008da2fc5fb151c661576d50ab42c5af6f8f0f38c01356d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147920 Malicious code in shelljs-markdown-webdriver-mocha-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871e92cdb1fd0e8833547b7e716488eeca5c8566ac98b62af09da9a487cc676a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148918 Malicious code in umbra-eslint-config-elektra-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a392c43ff4b5d26b28f817c91d48ec99b3a788b71d5993ba035c26f35df3e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142415 Malicious code in farout-indus-iota-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6f2da59c9af0e54ae6294798270600d6aaca512e3300354d315d1a0509d747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149345 Malicious code in webdriver-mocha-css-minimizer-webpack-plugin-ursa-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01dbddf36a8477e622bf1732299f16d35bb423944f8678a305a18aa199ba0ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147007 Malicious code in quito-umbra-registry-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef2cead8bc437414921c520821083a4ff3b65865bf0b3b088799fa0c5de2657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145844 Malicious code in ophiuchus-spectron-webdriver-subscription-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bbcc0430e599d601acbf2f5ccd63513ba9fa4fcaeb3ab76b6221416d6c2a85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...