MAL-2025-139239 Malicious code in aether-procyon-corvus-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8123898624474af520819d1c6b677e6d1936dc7da4b7636be947bb8d4405b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146239 Malicious code in pino-pretty-less-janus-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9d6033619dd075c66d22a2b5e6f8dff5062b06e279df511f1244751d71c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143596 Malicious code in ini-passport-quito-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ffeb311d8f1e110ffa3b60f8f0c6ac8e6d86e6a7314e921dface5e09c5170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149234 Malicious code in vulcan-fork-colors-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902b014ef02bf4a89bd5777fe120aaf8ffb901c0b2721470f49bba8874914733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147263 Malicious code in repository-dotenv-parse-variables-foundation-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc4e43887209590a044bb3f50e640e01143b01b3499e17e38f7fcfa18a28875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144531 Malicious code in loop-quark-rimraf-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c51cd66b65d2db1213f39eea53dd4603c5e7caac88c57ee60eaa8cc09dc337c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146341 Malicious code in polaris-flare-wezen-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f1701576b7f75072f88478c01ff68a76e579fe05dbcf5a902e4bf45b63903e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143421 Malicious code in husky-loop-writable-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146941 Malicious code in quasar-bulma-tethys-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8e67c18daeeacbb5f975e2833c77be01cc75cd8706f8f443d850d65db26167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141315 Malicious code in css-loader-reveal-md-non-blocking-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d02d8ab00cad9c7f83e9d7e9dcc166e84fffcab020a1aba91e58426ec89c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148433 Malicious code in sync-sedna-titan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21b6da689a26b9fc953c4b51dcbd64b26126504fefc42aca279aa0cee6f1b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146439 Malicious code in postgres-meissa-install-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78e694afa9ed340f715efa6d82a75a2aafd8cd410e334c6974fb4f9d2fb94c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144823 Malicious code in meissa-phenomic-eslint-config-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d35422d94e1ac252df95e0980b4c94d42775dd5e54a3127568226091095db9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139732 Malicious code in auth-thuban-despina-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994aae1a5bffc21ac6c1e7d02d8aee1f9f9b02e29f12defd7293fa63c496981c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141968 Malicious code in element-ui-fornax-telesto-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85e910c3c85298b0c02b5c482e89d38842f8222aa17b4fd8a00163febf72fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148807 Malicious code in triton-bellatrix-dactyl-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4fcfc725bf72c153080133ef83094f7786e64163bef4ecbee61d8226ab4c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149867 Malicious code in zenobia-javascript-transport-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582ed82565cc2459fabf0fc9b1e689521a7becf110b9799fa259ced54307aa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143527 Malicious code in ignite-sqlite-celeste-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4d5abb0301795f75d05de9285062e5acc9ff864947b09c2cb09590507f1030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140376 Malicious code in canopus-writable-acamar-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d3dd08d49d109a4903d040371041d4d3b34ded3e4e3be67ac6828ba2fb33f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142664 Malicious code in foundation-adonis-duplex-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38792fd6a11ea8ef7a64db75341f38038e26db247eece3461d167c909c7481f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...