MAL-2025-142824 Malicious code in ganymede-titan-rollup-plugin-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9413cd573eaf0605e0ffed7a4a693e158084145957dfbc0cd50f5112ad02e331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143398 Malicious code in hugo-rimraf-eslint-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074c78f0a4fae1045293325cfb302d1b4d38bfcac2d5281d407656997d74453d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142074 Malicious code in envconfig-halley-despina-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48934d339f8bef386426802ada777ff1e8a39e39111d761252b18c165fc55ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140814 Malicious code in cli-ursa-rigel-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bfccea257902995f50333344f6cadcf7150cfdd31b9f5dc79dc56a4e1d2a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142231 Malicious code in eslint-plugin-element-ui-hyperion-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5038fe2a3c36f89c8648d1958ea6266b9e56a0ef60f2efb00d26435c3e79a2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139721 Malicious code in auth-equinox-orbit-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9475c3f922c44685e8fc041b480d631659d14f00c8f412a69637d2e0f5b0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144147 Malicious code in kaus-jest-miranda-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4e3f11822f69cc3af5103540deaa2a91bf3bdeb149f75822db55827184c9fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141548 Malicious code in deneb-markdownlint-venus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9072afaa134e1e2a0c8fd4b490cba7e97b3f7cd3d0a7707a1d0e64a8aca1f89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145605 Malicious code in non-blocking-colors-xml-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7c05a91dd751ebc574c9fafe6c079484def23e71f2a4ea9eb425dd310c652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148037 Malicious code in soap-taurus-alphard-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1d5f090be809b21c5b50628f723d4f107765b7e01ff6e0a5a790938b79adaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146833 Malicious code in pulsar-html-webpack-plugin-yaml-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de284ef22c3d79d0eb08d849bacc79b6b331418af35f35cdf63627b30baba057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148875 Malicious code in uglify-js-nestjs-fornax-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f836626a36dad3ac3a3576de198188f321dcd3c9875be1920bea36dab436d7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141931 Malicious code in electron-sadr-quasar-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad9acdd874d1a9f4ca282ab7f6c2dbd712d999f56b2c92df4a4c05906571c7c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141369 Malicious code in cygnus-html-webpack-plugin-convict-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a7c905e6d297a266e003ada74f2dd7959d66a6bba0eb74d4c082c443e0fdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146182 Malicious code in phoebe-spectron-halley-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6609c06d440e2b17c22a87b2aced1df5a798c2dfea152333b4a5a15c25eabc53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143242 Malicious code in helios-vuetify-deneb-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9018411a1ed02158055570dc48502874efbe84da714416b032412d42a6186f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139764 Malicious code in avior-cz-conventional-changelog-shelljs-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff22f6e1d86aed35355f82b088b7ac1a4a4215ad40bb82f0c8cbe3faae43710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146092 Malicious code in perseus-kronos-figures-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb27018f4f80f4bc6b981bd4783b7165ec1289ff35009e4723281ce7b6b0d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147897 Malicious code in server-eleventy-centauri-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff10d0c2bc381296e95a09c4a4c449a52401e65d48f7a9eb35b4c1232441201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144075 Malicious code in jwt-gravity-europa-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be7fa33387a388a74d553a6565ea17cdf186d3eebd9b71da71d8d855331e5a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...