MAL-2025-148736 Malicious code in tool-jabbah-inquirer-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c23f115a9c2230624fa6f80276eacf194a28e0e56c5b3d3a789f1e944714c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140203 Malicious code in bulma-aquarius-nestjs-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 636e9e92806fa50b6cc23210d705eb9f81250588b5856b4937405ab5baaada68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144314 Malicious code in less-loader-centauri-subscription-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8358fbb12d3db96e025bbe6eda5a0ccc017c35f9a7f8dfc51a6dce33f9cd71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139845 Malicious code in babel-auth0-castor-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78dda6dd9d98eba1091976353e8dee3850210f8c8f25cfca2de9027e312deda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139336 Malicious code in alphard-pipe-hapi-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4de964b73b312b6b42e268b5dac8158264ef0225d09240b67e80b973cc7da2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144195 Malicious code in koa-kaus-sirius-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5da38434c856097646612b2314c16d72307a75149247333f78b7090326adf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145045 Malicious code in miranda-octans-gulp-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c04744516354a46168a3b4f2b000db78743727db300bb9c7527fd54bac5d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139876 Malicious code in babel-xml-config-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704102e6299151255ad2899537203756fa71f9da3d5977119078cc1302d822db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149496 Malicious code in winston-gulp-test-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6f63b35e35336a3a9fdd43cb982b8e17fbfbb1cc799341655eb1ea37467d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141907 Malicious code in electron-builder-leda-astro-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66f13bb1ee8af20bc55eee9c56fa3ad914ff33aea7d902a57b02f6c1cc34ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142861 Malicious code in geckodriver-chromedriver-gridsome-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8871ef4db86c7b2c8ce589d292485e4ca71ce731a3e3f9928d59a1985727379d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147477 Malicious code in rocket-phoebe-phoebe-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abb6f55dac5ef11374f9fa96c5771d9ecc7f08d9a77248e89188838c71138a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140321 Malicious code in callback-venus-flare-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc23af055cefad148c2cbf98683998b9525982e272f70c25fcb1f3cf400a4b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145388 Malicious code in neptune-version-eris-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0d74d8bf9d662ccbb903d0bbf47640da6df42e2465abce2007ff3446c08fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141386 Malicious code in cygnus-testcafe-triton-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c1dbfc37a1f15e2af108dab30a536018b040f669ec38985a0cafc4f324fecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139390 Malicious code in antares-antares-run-script-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20f91c50d5c34e888bb44213261f3dfc17384d14ce489e54ec198175b3da50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149833 Malicious code in yonder-commitizen-chromedriver-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02832b590fd2cd8660980321970eee2b88666c0c55aa94adab8c56567bd64c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143450 Malicious code in hydra-pipe-lint-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8bc7b83100d9034cd6ba13dcffc904a47fe59fa5d8bfe9e592b2496d9493a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139596 Malicious code in ariel-spawn-commitlint-config-angular-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a4b690231e8993be588436a23517703f8f8c1099c2280e2dc9aed2d0c9b7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147256 Malicious code in remark-shelljs-phoenix-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e1017c23cd53607be3402508b6ffbe4c1cd96616b24e3103727f4e6ff2d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...