MAL-2025-144607 Malicious code in lyra-eleventy-phenomic-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781feae0250f509d58698804ac377422ae24d83a75e63818a4dd45c7520a7fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147441 Malicious code in rigel-tailwindcss-electron-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77df21c4788f9beed086cb88985b131d710bcd6382aa8167fedc0aac70f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143832 Malicious code in janus-sails-repository-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b717e4890005e4ec07be65f1916406d5749e4ad38235d36ddba0bc9d3582e320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148851 Malicious code in typeorm-mui-scripts-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000646b77a1119bbb3b3a76c92c2217a75d9894c9eb5228d4cf33b492d0e2e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141128 Malicious code in cors-levels-babel-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e3036f605baee68a2b7ae5a594db1d71a83877342ddfc786b34586f7318a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-aether-castor-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62aca217b44a643af9a5fa2ca7740f27cafaa83abe59fda3ae8724b08ed39f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-janus-lynx-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0e765a02a79d0730e5917bcf4738e27a5f4bd6beffb7dafa057bc1cbb81822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143561 Malicious code in indus-child-process-apollo-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 907068498ca83a4f322fa13c07e12119461db1ab2f93983dcb53f18a4a2279a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145359 Malicious code in neptune-eridanus-jabbah-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf8e91c6a667fe241fd67d4152b461ba2a0c007607acea3a94c86dcbddc4247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148613 Malicious code in tethys-commitlint-galaxy-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8d865c713f0bfad46c9192deb53efc6b0e50650c66cadd892196d27b5ffab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143145 Malicious code in halley-hugo-node-config-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18d81c7012eb412f8679db20a766a516042723987121a382c43cbce0300fee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143165 Malicious code in halley-semantic-release-playwright-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53118a5c23b7cec89c72fab6d9e61d755aa4da3e21bdf6837018483278559b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140049 Malicious code in blitz-leda-meteor-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095653f9eb37e46f07cd046aef238d9dd31554eda3b3b758f09f0d3d76c2d31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147821 Malicious code in semantic-release-backend-scripts-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3df3fc402b54693afaf15ba26eee4688a1020285588b66a7cf0e0431a7f767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141363 Malicious code in cygnus-avior-perseus-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b4880b9d02fdd73016760d9ed188f4394d5b3b0cc2c17e4507049459299210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144662 Malicious code in magellan-sedna-mysql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b65804b6bb09003a5cc8c885d0d244a90568ca367173e330cce79e3d3433c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141755 Malicious code in dotenv-safe-hyperion-karma-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41545b93f714faf7d695c18bdad4365cb382c7a187442a99e2252a943a2c2cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139547 Malicious code in aquarius-sagitta-delphinus-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d591d1973e0d501c44c5aed9f6e6e63246cb03c6205caaad5d1213a3263e4f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147188 Malicious code in rehype-tailwindcss-spica-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbaa22480822e3bd06fffd321d2be249fa65838c2ae86440d457b59409ec3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147403 Malicious code in restart-yaml-celeste-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0f181b1bb1ae9fda5a31bf4d95640d8bae1a6e22c7bb78e99361c16301ad38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...