MAL-2025-145311 Malicious code in nconf-dorado-blaze-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ebb80e8bf00b13131bbcd85b50a8f37549e9e91d183e6378da97c6b1847e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142490 Malicious code in firebase-cluster-readable-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820483210b11b74a9cceba2dad0c86cddf03ea9ea44d69ec62bd34b28d73313a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146914 Malicious code in quantum-regulus-xerxes-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14a1f44c2f7c4f15e67c01fa676fe8a3e69cddd184659b61b87deb61de9a5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142353 Malicious code in exec-mui-fornax-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f47e73a851455aa9dbcea6e3f0a72af9c78bd18d708c86f524d78b0283887458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149821 Malicious code in yildun-publish-rigel-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad41b4f77799c536644ce19f2d0b364a90968668783412895a1440eb38afd37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143961 Malicious code in jovian-version-wolf-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f69a9086862655d20f6380f2c35b0ee7d3c426cdfdbd882de75490dd08a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147855 Malicious code in semantic-ui-pulsar-reveal-md-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48a80d995eb8677aec2ff6f9f1e190ddc765ead947e37559d1412568a96be99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147505 Malicious code in rollup-nova-inquirer-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f33f361a42c5d6ef8fae97296eb72132192a355ff8bbb783c6031b36c63d437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144134 Malicious code in kastra-style-loader-scorpius-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145a70e265be9cbc19dfdf8058afabde0e060e18d1a3622c1b8a0df5620bf0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147373 Malicious code in restart-antares-europa-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7129fe13bcd2285e085d76bd8a68dc750f731da29a69b5cfbab407fef5a6ceb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142893 Malicious code in gemini-callisto-regulus-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9c15b620dc27ae7d09f0800168a33bee4e27d7024b3a940b2849bc637dc10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139175 Malicious code in acamar-helios-redis-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4557404033bc3d055e3c2f97b617a069cd6bff099c1ddc4a3a1b79a84dd2591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141743 Malicious code in dotenv-safe-astro-sirius-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399cb87dd0f0cd51c19f01a21a145760bebc9a3e39e9fa193ece9d01ea33fb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-prettier-plugin-markdown-babel-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00f4e6be82f73104ac4b5a4fd55b9981d7034b9a4fab5d5cb577c6985de63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148607 Malicious code in testcafe-unuk-weywot-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462eea52ecf8421c53bb7dc5ea4eb44ec9e279532735153b7c54f5e3e44e0bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-astro-blitz-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd60d4c15ba4743a5534b1eb8ea3d9e85b07a6b0c815b5ad417301435de30ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148162 Malicious code in spica-jovian-norma-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c30e9124ef655dba4f9474ca074d53809713d42b208787ccf31a36ef7a4e329a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146930 Malicious code in quark-nodemon-geckodriver-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4884a9d6ee83a9f636acd3035fea7547cffc09b81ff94b654ea8905ae27113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143499 Malicious code in hyperion-sedna-umbra-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b9009f151a521eec1da0eb97632ce95d3433ba6e5c443a04f0c827bc181730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140778 Malicious code in chromedriver-metalsmith-toml-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099a4ebf7ac7382de09ed462478b2c913c3b9a9bf86d0bb11b53ad48aa1a13c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...