MAL-2025-139741 Malicious code in auth0-chariklo-rimraf-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be16292185703b19d81d57d39d2566605a656affe85387e75dfe92b2e94e7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142147 Malicious code in eridanus-install-supervisor-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1376bd5cb9c0baf92baabed9c0684dc0c88040e298eda6fe848c4b721834c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141456 Malicious code in dactyl-titan-cz-conventional-changelog-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ebcbb6b401a4e9dcf5b69e8d8f3e68be1a9f58d56f30831dd47a44939695ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147442 Malicious code in rigel-websockets-centaurus-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a42e432e68015b338ef2f1b14b30042cd08cea6c9c001efa9cb761aa3540fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147323 Malicious code in resolvers-eslint-markdown-pdf-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5edddf5489e959e628e53fc66c2bd0cffb613bbbcba0037d36286e701a0450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147119 Malicious code in redis-yakutsk-hyperion-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534ca0e61257cfa29cd62dee33a04665382cd6255381a16018d3b0f297226fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149412 Malicious code in webpack-vuetify-prompts-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc205f3c39b95556edfd8a57a59164599cc6c819582fc203fc01257b8ac60259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142286 Malicious code in europa-phoebe-publish-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b6531932ae429bc67534a297bb4eabb8655acb480e6479c4ac934cda34eba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145090 Malicious code in mocha-private-cassini-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc82190d8b17d1f57a30e12ed75fde26ae8e9fb09897bcb4bc0cb303e68b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144564 Malicious code in loopback-server-grunt-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f767bb3ff31fa9ecd5cbd84e586ecf684b960f25ac9654339d7fad97c02d920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142610 Malicious code in fornax-centauri-ceres-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4292f5a1b31a9d321a2eb9d21512f8235d0431796f54ab26eaf817f2c15b8d92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141818 Malicious code in duplex-procyon-polaris-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f150630be124e004b880b0b1ddb3db1a1a90e4dc246b805c544c181e3e6f32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147353 Malicious code in rest-izar-jest-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80bca4ad83dc46cdec9d6f957011f569c0fcfb8768ffccf992d588bd78d8c670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140431 Malicious code in carpo-barnard-tethys-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3e6e2cbdfce1f99dac07c16e06635150adaf3cacb4524c51c4c46c8ab07e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147321 Malicious code in resolvers-dactyl-process-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c192be33a155577a5f1ff5067fdde8184432d1e576e678aa429d38a8c06b33a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141419 Malicious code in cz-conventional-changelog-express-concurrently-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1006562c4b993f3074b53a6661d0167315fa1945da6f4521c49f565b3beddf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140188 Malicious code in build-publish-centaurus-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97fdf8cc707d1ad10e2072131e6414494e53de3f5aad8415866f852ad745ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147839 Malicious code in semantic-release-update-kronos-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da546cb3c2bf0dd517acd0ea1b421c16b51e5572a631825d7770db5b7ac38f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142971 Malicious code in google-testcafe-proxima-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3e15135c2453afca7d20db14141c951fd9a74b005c6f62e5c5436455ed7d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141230 Malicious code in cressida-eris-perseus-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22e87f4346aac0c818fba277bd7c8ff59ec620b64232a4da60d0564e6e263be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...