MAL-2025-141430 Malicious code in cz-conventional-changelog-quito-config-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f531c1a5b96fb5c266aacd15d4ae27a8090ff2b20ecc3b0874a6b3376e26d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148375 Malicious code in superagent-castor-mongoose-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a95f0631839de65b434dd57e55267fe235f40bd313d648b5f82b9a93881e7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142853 Malicious code in gatsby-vuetify-development-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115d3938de17f161d1328e3a01824c8b612e47fb942519a31d5f247322903bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141534 Malicious code in deneb-bootes-postcss-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0946cdea14d211a37908ae44081e7d4160b2eb486139d669e4b767981335152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146512 Malicious code in prettier-stylelint-nashira-start-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ebd32b4bf8b3a577c8241ab5654cc0cbfc3b39f81ee7cffe476b70f977a77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144327 Malicious code in less-loader-prettier-plugin-markdown-pino-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941bbebe0ee4e3f63add6441b1afb4b7612a1b5f5d02337def841b6019fc45b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149001 Malicious code in update-remark-husky-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564f5aabcd5143e731fe54f0a82cf31f5b1ef0127b7aa837c2e6f4cb1eb0d123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142115 Malicious code in equinox-acamar-ora-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79491fe41ca22980491277a8cb5b34e805fddf15f0319d9c1ec3bd5090dc91e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145446 Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143940 Malicious code in jest-xenon-virgo-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41052832b11c01621451b9c793d8ca4bafa5721676a30c232182ae3cf32657b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149593 Malicious code in xanadu-deneb-non-blocking-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed8eae916437f4396d4472e5b2e80860392a6b8fb1d4c93e30e3815f60809f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142313 Malicious code in event-geckodriver-orbit-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ea1f351f7731a4ee06d3840c0ff604f3d794d4d09ffdf637f2cb2dfc43f420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145106 Malicious code in module-gulp-eris-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a2c8f7936923d5b90b187fda4882834514ccbbf6c8540c1405cb7cf14d7dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141287 Malicious code in csrf-izar-resolvers-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a98268bc4d6827717267c3f7cb7dcdb135f6828102d3a638c513591381dff15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144021 Malicious code in juno-child-process-izar-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884e74fd506fa1bc98cfbd4ce57585a43813d8be971e030658be9b01ea9b0e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144560 Malicious code in loopback-puppeteer-orbit-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb39e2620d3390231bb1f11d856b5d83153e0517c509f97d497defe7de83a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144347 Malicious code in less-toml-antares-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ec4a01bbd1ea8ae2bda0f50aa1dc0ae9f30ad46a23957b7b705766c3a1db90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142007 Malicious code in eleventy-nightwatch-betelgeuse-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7320bdb07066e0a567dc2a7383e4ee563738cbdd9f7bb0127ee6f78f232f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144290 Malicious code in leda-rigel-antares-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be301a42f033b5a9ea4c10f77415df52a52f4f062a65466b42ffb532f5484804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139744 Malicious code in auth0-eleventy-sedna-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f76a53b8855f0c1929c9ed27e787320d21b2e4df8ca1a9760a0f6820268bdde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...