MAL-2025-144545 Malicious code in loopback-cors-scorpius-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66719063eaa5d6534858f4fd987d7ddb6562a50ec3a91cd01caf702bdbc25571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142918 Malicious code in gemini-server-ini-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5d0360722cdc73ccb7eac133b17b09cfa918f7f0436c2a0cfa464bd4b5a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145175 Malicious code in morgan-exec-uninstall-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584ecc682ea10cbf9660202820033a0cc131524baae86da7bfea15e33d047fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139771 Malicious code in avior-jasmine-graphql-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3d3277b27acc95161a9bde05520193ebd02caf5c93f00665e5f2c50240f7fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148113 Malicious code in spectron-cordelia-vortex-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924a3c2cbbe1ad8b5c0a087a6b8f6e373b3ed5196ce4c7554c5b23b4d3cc284a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149516 Malicious code in winston-nodemon-electron-builder-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd4fc533ec723fb7ba42bc781479f72f08c672242f24a09e80136673b1b2b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148989 Malicious code in update-airbnb-dione-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd75e4671ee3cf03a883d7bb91717226977806f05620164ec92500c25a6748d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148515 Malicious code in terser-css-minimizer-webpack-plugin-loglevel-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7935d20d07e495cdcbab1cc3dda880187161dadfe8d56c02d11fa5e642119489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145357 Malicious code in neptune-elektra-transport-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5619d2615186fb3d2337f8ba716e0bf713e08317404287f6c4d9e7596f1c4b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141983 Malicious code in element-ui-spectron-webdriver-mdx-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b8d470d321ab03a10ab9f4052b8c7b555af0f0125d6f018b30dd015827bbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142663 Malicious code in fornax-winston-browserify-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f681f131eb8845d37ee1bdddfdb57567b5d6228bab90e97c2fd18160b3c7679f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141352 Malicious code in csv-ora-relay-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b21441c8f78c5afc7820cf0a2d79eb3499fa1781bc2b779d68a7a46288bf644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141745 Malicious code in dotenv-safe-bunyan-private-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4780bb51498043095d7629cecb40fa21a3ad1bfe31e192d0c8439d367eb40719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143184 Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47665784ad522eb04cacf6b2f03e8ae0ac57786dd4012aa6cff0c9b286a13ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147975 Malicious code in sirius-rest-atlas-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbf9c3a8be98e085596d912e2d26f66b7541cabe171e657f3640996ee2f23be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144094 Malicious code in karma-atlas-bulma-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f820cd5fb006f806239a7ae303620b1c577497cfabb0c12ec2727c257f5223c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143368 Malicious code in html-webpack-plugin-postcss-aether-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308618ba8dcb36578482b63edb7c72de0fe2074c46c37291ecd1d3cd25da9281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144445 Malicious code in lint-prettier-stylelint-phenomic-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b262ab41535744cd75ba2de51356f96f98aaba5eefa0ddac512e45ed9ec33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149295 Malicious code in wasat-mui-sadr-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f3d8a941c3cd94b52f529a2a61733938e427dfadb021a5552b6cdffe5d6a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148180 Malicious code in spica-spinner-rimraf-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d87ec4e5f35f7aac34b2013148340f8da18a20c969c2efad234a7f9588de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...