MAL-2025-143981 Malicious code in json-proxima-tailwindcss-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb74997a4a6c88093ebe105687a6d4d7790592f71e1bb9ef948236906dcee08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144718 Malicious code in markdown-xanthus-less-loader-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30fd4b247599dd9ba70c60cc7739635c150dbf43b468f570acbaae0ad26e5127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139770 Malicious code in avior-jabbah-proxima-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfaf0f7900b83bfaf360a985b7e89565f43d3bc84dd987ab108ff935e06aa7fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144947 Malicious code in middleware-barnard-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ffafd3b6e043d42bfa7dbb3f79f69ac43015f66786a1e96366df41603d8f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141819 Malicious code in duplex-protractor-npm-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f75328c3b60f551922c53082dfc1c61f9372109ebd52c544380f42f1c95a86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146069 Malicious code in perseus-blaze-ganymede-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c36548131bc59eca950e04d1b40f3421ac426a7189a8aa205124a8688d65eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149106 Malicious code in venus-deimos-public-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d0d778c8df669fba403d905c69e073ea9e7cb886541e7d250b5deeda1742b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147278 Malicious code in repository-passport-vortex-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50013f5f24460ec3a298657a62bd80113b5ac1eedbae8ee0ef592afbb0383fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141244 Malicious code in cressida-sirius-rocket-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b239720987b2244288b57886086568311f5253ddb8d036fa28b57d806bdb167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140014 Malicious code in betelgeuse-wolf-octans-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4e62b6c89c77d85c75efe05cc02347324f258c5c99bbebecdd1416bb26a65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139282 Malicious code in aldebaran-inquirer-sirius-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f156ebcb080250b5894ba54bc2119f15aea901db4121b5dda0df4c31a2490c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148897 Malicious code in ultra-gridsome-aldebaran-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f8327283601fb4393b0aa988429a28162ea15a687d0f2607dd64d2ed36d158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149071 Malicious code in ursa-reveal-md-antares-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc48de705e14b0fc19c38e6070047b60ded65999d88f313efbde52229f4b8df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146281 Malicious code in playwright-fornax-enif-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91a879071e13ae5f0848d6bd342f7f9dbd34ab7b15720262875b6ed4438c25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149115 Malicious code in venus-materialize-middleware-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7edf3762282a5e21f97e55705f10dce56e313a7824add172bb388fa0ff9e452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145656 Malicious code in nova-css-minimizer-webpack-plugin-prettier-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7283a8213789ed347d62c1e73d10821e6eaaff86e044150ea8b56f0c99867860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144010 Malicious code in jsonp-spinner-dotenv-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3574701b933a49c45959aa3568b887dcfd3d83b1c6197131ec3d1479d610ad0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144823 Malicious code in meissa-phenomic-eslint-config-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d35422d94e1ac252df95e0980b4c94d42775dd5e54a3127568226091095db9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146515 Malicious code in prettier-stylelint-publish-ganymede-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bee700dd60f89d7636e9dc4890f0ea34fa4b85a80efabd156924d8b4000d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143197 Malicious code in hapi-public-unuk-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d5a3b35db50fa8d9809095d9a28923d3f8749ef04d21133640662959f81ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...