MAL-2025-142635 Malicious code in fornax-markdown-pdf-fornax-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fca9ac077731eb9c84805cd06e984e703d20cf9bd5b748b27043de947b45ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147440 Malicious code in rigel-spectron-webdriver-dotenv-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac6d525170b55a178d5be03793420354ed5b67b0d55cb5e8b560bba82486569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146609 Malicious code in procyon-non-blocking-mongoose-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea88450080d7164cdf4c38d5dac58f5320ab57cdd25d5d0307da65f884d7ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146664 Malicious code in prompts-hercules-markdownlint-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07b854f4be56a57ab029d933b752ea4abf4a14098042f73d4b571fd40263a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144282 Malicious code in leda-nodejs-nextjs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146648 Malicious code in promise-rimraf-supervisor-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59479e17cbe88afc81a1c8a65d70256bb17e84aa6391bdafb3acfc2ccd62424d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145255 Malicious code in mysql-mongodb-non-blocking-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc4ac2d3328c3740aa19ee05d8399c17e433d438b2eecf42c685b9fbfdc2ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143088 Malicious code in grus-chai-library-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d8d2a8feb73313d210d8df9cd9f9e816a0083679c59fdba4f8a9e7ff1c1018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140912 Malicious code in command-meissa-config-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bf6f8a6ac69fb91ea2deb9bae6b5c130a16569a091709ebaa8a834a03f251b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148339 Malicious code in style-loader-resolvers-alphard-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d9bd3a391bab4e4ca35d2acdd9cfcf21f89ccc6fb00de7a1ea2767b1ec6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145541 Malicious code in node-sass-geckodriver-colors-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b1ee4a9c3a715364f26c25e7eb1c0eaff93c630929b0eb42fffe4956558882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141906 Malicious code in electron-builder-jupiter-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e6c34d8ac0eb601de5dbe1d8ffd3e9486188b296e4dabf08a27344637a8159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142269 Malicious code in europa-google-typeorm-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646c3cbb9826e253ae7bd67a3f6e6c0faddb21b017db2b59cf241dc532bdd262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140280 Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a3d4d5f839eabf76c1685618852ca8f8e47c947a0394f2e9ae352f14632373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149772 Malicious code in yakutsk-jest-sequelize-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e8e8e3f60647fb8f627ae04557661e87923e588fb334d4d4ba33d2b9b02584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141135 Malicious code in cors-schema-nightwatch-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3068afe7dca873227fe3f04e64f38db980de42d0e7cc3bfc9bd80c41ccff06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143153 Malicious code in halley-local-airbnb-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5f7cfaefcaf380f86b20f812c3d5e97113bcf8ff0e3126e8cde3c38f434c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-scorpius-global-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a295c603b76a38d618d9f50be6f6317eb946aa55b04eefa49bfe10b3e03fc9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-sedna-global-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1925af83c70212670bf7bfea9259d1d270a1615b24c36b148d269633e7446d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148175 Malicious code in spica-publish-bootes-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ece20926a01bc492b313c3ba1b53af1fb0a45983f262b91e3b4e465a511373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...