MAL-2025-142664 Malicious code in foundation-adonis-duplex-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38792fd6a11ea8ef7a64db75341f38038e26db247eece3461d167c909c7481f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147946 Malicious code in sirius-development-gemini-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e955a5191c86c0569fc6fc59e5066668be1770cfc264f30ce9c384c7aa39560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141819 Malicious code in duplex-protractor-npm-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f75328c3b60f551922c53082dfc1c61f9372109ebd52c544380f42f1c95a86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149234 Malicious code in vulcan-fork-colors-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902b014ef02bf4a89bd5777fe120aaf8ffb901c0b2721470f49bba8874914733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141244 Malicious code in cressida-sirius-rocket-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b239720987b2244288b57886086568311f5253ddb8d036fa28b57d806bdb167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148182 Malicious code in spica-terser-rimraf-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85c5ae642215aab8b0b119876bbc8656b8061b80381484e9e2b94aa377a65f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147278 Malicious code in repository-passport-vortex-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50013f5f24460ec3a298657a62bd80113b5ac1eedbae8ee0ef592afbb0383fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148823 Malicious code in triton-phoebe-lint-staged-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da62219aeb9b6a9e0c008d8ad616786c15270b713723595780d92d8f0cbd2ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148301 Malicious code in stop-polaris-gravity-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eba5f01f9a9e3d932f8d07a8043fff56153b5b693c9f0aa45bd3d51c997c687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143527 Malicious code in ignite-sqlite-celeste-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4d5abb0301795f75d05de9285062e5acc9ff864947b09c2cb09590507f1030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142489 Malicious code in firebase-charon-node-config-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148865 Malicious code in uglify-js-apollo-cosmos-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a32d11266431e314e9672a090b6607b6769bdfc56b19dca1aa6f31063021a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144745 Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140509 Malicious code in celeste-impulse-private-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561829010b1dd2399a0da8cf1d3b0989a0adff576be915b99df64aeae7651dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146879 Malicious code in pyxis-juno-uninstall-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598f75f9bebce3cd6831090987228fe25f65a87b1121c7b3ef723201507cdf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141799 Malicious code in draco-wasat-neptune-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3a50d36f059771d015ad833ded3b367018e0d184958b2768f1a46324dbd2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148640 Malicious code in thuban-apollo-sirius-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ffb6700a7e0fd845e376455a5280e4d7c5ead3a5c6ae9020842cfc8f38ab6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144313 Malicious code in less-loader-andromeda-less-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8756e1e5dec54aa1aff257fdcd777d65f86e0a6df55149226949ec83b609f32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-zephyr-cygnus-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126408fe26e034015b137d865bf1fb63593a019521549e408cbab133a62fd25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-chai-ursa-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603a1063a78f7e38fe4f0f14980576141ab4a2b8b61770ff4e99fb73146f6944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...