MAL-2025-146793 Malicious code in publish-magellan-gridsome-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f93592d2ec1ec8e63b9e15330aa3c03808c093892a7c9060478041679f168f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145675 Malicious code in npm-cressida-antares-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9e077222905d8156a630abb6c49f2ebdaa023e818242f76ceac1de7292a6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147285 Malicious code in repository-webpack-hugo-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa17606ae0bfdc71baac8f81e5f033534a0c52d09eb5e5dca59d3079814ca2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148888 Malicious code in ultra-bootes-async-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd26e69c3e192ded739ff679b22feebc040ce7ee70091e860c1087ad35dd6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143038 Malicious code in gridsome-docusaurus-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee67c97a3529471781f0204f2dfbe128842c724b789c58e825c918fae1e87e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149868 Malicious code in zenobia-markdown-pdf-sirius-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc930c5822a7bbf58c6f7f984bf76daf2b51adf0233ea6467e01ce03a493ea1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142020 Malicious code in enceladus-astro-changelog-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6efd41f89e1f4813626936bd4429f05995210039bb5ea8841fb974a5dad146b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144729 Malicious code in markdownlint-solis-fornax-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614d338c1f227a98f6e8b14c4ecab4ef110908f22f983d218d1b67e36623f855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146886 Malicious code in pyxis-perseus-release-it-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b04e9c06a4cc4e95b2435dbd3567c0e5ee46522a071221fb8a3640bc33a207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144343 Malicious code in less-protractor-nebula-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9408abe13d23077284ee2775377bab10375093115e0c5e9a2cc15760187cd65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149329 Malicious code in webdriver-manager-node-config-kronos-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1487a2086061645f46505d0ea84f0fd8978d75ca814f8bd71fbbcb525ffddbe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145295 Malicious code in native-spectron-mini-css-extract-plugin-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505388a8783d7f424494f00e26cba4bd80636e9b279651a4c1f7bc3de62f07ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148215 Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57f12b0aed49526cc22a4e24142b150f9198614c3bae415e2ce627c100aff41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142853 Malicious code in gatsby-vuetify-development-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115d3938de17f161d1328e3a01824c8b612e47fb942519a31d5f247322903bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145461 Malicious code in nightwatch-css-loader-charon-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143778 Malicious code in jabbah-gravity-spectron-webdriver-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a14876cd051d8483ba0a279937b068a369f159a8e691f8a587426e0db9ded6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148193 Malicious code in spinner-enif-spica-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d26974d55b3997bf277a318228dec1fe0e89c9b846f87315c2947d1d87cfcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142261 Malicious code in europa-config-semantic-release-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146682 Malicious code in protractor-dynamo-lyra-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd3577ae452df631ceffc6b04b9bf8055b4794ac4bc1c794b37786a83638dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146038 Malicious code in pegasus-iota-config-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7ee901b19693d954ff98d4cca16f606bc47bb75e7ed26766e07d75e3a35761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...