MAL-2025-146176 Malicious code in phoebe-rimraf-transport-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d320839b4d250dc51a6c8d4afcf02325f2d067157ca501e732ebea5362aa8ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147334 Malicious code in resolvers-rimraf-tethys-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45711639e7beefdcee4f29bb5ec283bd1503503b40991b0fe2acc470ed2bdd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142736 Malicious code in fusion-init-helios-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76cdfc161d1d1478513f97b5ee9591ccbfda1519328392d6c0c8fac08f36a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142189 Malicious code in eslint-cluster-cypress-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 637d53ea4287f7af8a63ec76245b34257bda9841fb3c7c973f50572c1f7328c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147666 Malicious code in sass-loader-forever-vulcan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d964a2ac3b3ff01e0e1881b5a523f44e15739da835226a37dab4da08c7b4fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147883 Malicious code in sequelize-update-umbra-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04b62248932ce1eb3bd7057c3cd0e5b5b2cff794acda4db4a8f091129b1cafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146682 Malicious code in protractor-dynamo-lyra-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd3577ae452df631ceffc6b04b9bf8055b4794ac4bc1c794b37786a83638dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148120 Malicious code in spectron-nextjs-element-ui-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0061303e422dc557f76edb02ddf4add87660df7d1e7b5c1ba2c1410f24e5d69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142978 Malicious code in got-enceladus-aether-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd05fb12363dc6a9c123b7274c9b266820561db8067462d96b4bf44c9a09a52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140476 Malicious code in cassini-taurus-init-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e8e587d4ebb2912d2b71771a2c9697c9cc76f613e2ef8b99f1eaac82ebd142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143846 Malicious code in jasmine-bulma-janus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378d5568b728345b170c22d3c4ce9c4d7d79cd2eef452efe9948ea118b875b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146038 Malicious code in pegasus-iota-config-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7ee901b19693d954ff98d4cca16f606bc47bb75e7ed26766e07d75e3a35761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144719 Malicious code in markdownlint-algol-chai-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11cac21b59d57f39403b3152a77369e8dc1a301daf2eac4c4931b9a68807b037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144729 Malicious code in markdownlint-solis-fornax-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614d338c1f227a98f6e8b14c4ecab4ef110908f22f983d218d1b67e36623f855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142020 Malicious code in enceladus-astro-changelog-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6efd41f89e1f4813626936bd4429f05995210039bb5ea8841fb974a5dad146b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143038 Malicious code in gridsome-docusaurus-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee67c97a3529471781f0204f2dfbe128842c724b789c58e825c918fae1e87e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141753 Malicious code in dotenv-safe-global-jsonp-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f253194bc152f223c5f587a9c7fd65460595c70d27749389763c4afbb0de8ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140954 Malicious code in commitlint-blaze-rollup-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf36b483a8129794a54f0c8d1844c78f630daaa63863bc2ba90f9dca71b7166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147115 Malicious code in redis-sqlite-odin-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6508b6ee75945f1d3e5c0620456e69c2562fc5be6e27f8f8e508184d955043ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146466 Malicious code in prettier-enceladus-pegasus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922dd32d2c25215ae03fc12f657554932a92be0caf2e526bdf50adbb6271baf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...