MAL-2025-146302 Malicious code in pm2-loop-izar-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438fca0b19ba97c3e5e51640fa7210c3677d4e07d791cd09842ce448342e4bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148701 Malicious code in toml-avior-nightmare-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6655fcf21cd2567c7daeb44b3509c7e95cf137b65321be1615670c2bbe0092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143600 Malicious code in ini-puppeteer-sirius-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f165079f96f534969d007a41855a4d7f2ed41baf135f410520c0d13780012190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145542 Malicious code in node-sass-google-node-sass-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916a91c4d8ed0d001a8049bf53130bc5cee5f30c571b7bbcebcb9ee50036dabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141404 Malicious code in cypress-quark-celeste-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea4334579260db551945a868a011ad61151a559d906846ade5299adf7561ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139748 Malicious code in auth0-gacrux-gatsby-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf6f8d747897cf96e7085bd279d14256a71b19de5530cb312399c232e7e9495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146230 Malicious code in pino-pretty-bunyan-aquarius-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3be5ea47811d0b857872514e29ac72bed37f671a39bd04d05eeaf989ba52be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144077 Malicious code in jwt-json-commitlint-config-angular-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8cf9b1c13396fdcaed50f6accfb81507a6b264062567666b0286ca187fbe57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149191 Malicious code in vortex-scripts-scripts-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0409451d1fd539154e63a0e4b69cf370ab76eec634798644da864bf87004163b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149172 Malicious code in virgo-toml-passport-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584f8b619a6b42d51e3495d518d1c3de32ee362ccd4c539987a484b1f3711094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145066 Malicious code in mocha-aldebaran-sass-loader-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4e7e98e5605c713059061d8faf2bbea600f5c269f0c61c5dbfd5a723d4c601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141659 Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3781c2b35c32db7102a4b5fe53e960e27ffc3ebbe36d1de5dd2d10485b7201a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145377 Malicious code in neptune-redis-centaurus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30cb182b799074deae5eade3e79ff72d686bbd8345adfb98ac22f45c1e1abbe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146243 Malicious code in pino-pretty-rate-limiter-xerxes-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abf532044d3c7fd705ec111e6e3edbb278aef7902b90066d9d00267bcb31a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147554 Malicious code in run-script-update-tethys-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea68645694de9a182b55de9fa8c58d02c1340608c7676ac3400270fe913aa2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142429 Malicious code in farout-yonder-convict-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c5ec00308a06b9e932a7c73d0618dd1b9b6e1848c2e94c2472b36c9395c0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143907 Malicious code in jekyll-javascript-draco-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6d1b5e23f5b42bd7a38be0d7cee36fdd4171be8cdb7f30aaa02cf2da7e5680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143797 Malicious code in janus-apex-writable-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfdc92c35108b7bac99e9f035fd519cc20125241b0a253c8541000e44936d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145271 Malicious code in nashira-enceladus-hermes-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fccb25472b5a53f94b5ce38556e9aa4ad103a488b4ea0a138a81bb97c23fad1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145327 Malicious code in nconf-quantum-style-loader-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179bc24cc0846febdd1660ef9caea52e3cd7cc38814851bd94acfd20e3ed0568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...