MAL-2025-141217 Malicious code in cosmos-query-wezen-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468aedb812e50306a56e615d514ed9f35ae023813e0db1c14d286f4840e43e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147254 Malicious code in remark-meteor-slides-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db4f750a0eb590c31e0a9400a047a1df8bbb6e37335e96c282103d3ef23085f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146626 Malicious code in procyon-wolf-middleware-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b4bf30966429dc013b6a8c5fbf7f2bd149e3f37da0518784c5d4f6d5e13747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141049 Malicious code in configstore-enceladus-reveal-md-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d8a3120c190a34c49156fd1e686e81f0eb1c3ae6171c5f6d558e8b32034c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144421 Malicious code in link-rigel-lint-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c4014a7c915155a3ac1b7f73f12460e96c04917dcd1ef4161954007d8dab93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141414 Malicious code in cz-conventional-changelog-cassini-websockets-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af3c7c32abef3f09dc34cac5664ace8f3bab516c57abf3248fb328893d55142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141979 Malicious code in element-ui-prettier-css-loader-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f9dda515544b35b86895b297fc0976b11b17da09edfed790be05a518080f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149443 Malicious code in weywot-nightwatch-parcel-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf715bf25efa7cc4338bbd3849ea8c9c5f15eb3cd6d1efa2dab6d489b92b72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141486 Malicious code in dagda-server-writable-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae875b5316c762804cbf34948832e6ac8d9e8e240e5ae1343644ef305b5fd088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148864 Malicious code in typeorm-xenos-hermes-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bd8e8455465ccb136581cc210a5f1565770cf672f43b994f6e8b31c06e57a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148476 Malicious code in taurus-phenomic-forever-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e64be3ffd5563216dd100283bd77ee03edb1abf07974d1854daf010e063e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141643 Malicious code in dione-cluster-hexo-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8497ec4c25a6c9e25ffa655c0a28de102cd03a2893bad483366653df906f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145313 Malicious code in nconf-elektra-testcafe-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d45f11da5260377602e2a2dcba65f2ebc42a878b0040f31dd4e4a92f948efa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141051 Malicious code in configstore-firebase-dotenv-parse-variables-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8bc64e640d9cd2b3a41882b58e530631f6762fcd827528fd2025ba8142320c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146807 Malicious code in publish-prompts-dynamo-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc122cc572c3d2d1191ceaaf9b9258aad88aba7da7c0c08509fe79058b68496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139633 Malicious code in async-package-spinner-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67481eaff1ab609487e64181fec0c051ced741075c652753d934342f610f9fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145208 Malicious code in mui-prettier-stylelint-vega-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5974c98276e228f63891b0f797ec560aaf64d1e4c84c48b15a0452a6a9d426f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146991 Malicious code in quito-eris-markdown-pdf-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8ea8733b69b5c135fbafdbc9376fa64fe9edce2f35fed5ddc73567efb19685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144264 Malicious code in leda-convict-commitizen-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed8d2bd7bc5314ec5274d837a577d0e748ae44450cc9db11d1fb8e7a98b1224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144881 Malicious code in metalsmith-jekyll-async-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae80eb5fe94ed880a1e30a8f4eca1187c053f73941d55412553cf556160de14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...