MAL-2025-144848 Malicious code in mensa-enif-magellan-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533e0ae285e04abc18553b4bf644ea798de190bdc453f5ebba48f4bab21c97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143439 Malicious code in hydra-duplex-ursa-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6937793f75424fe2d5f90958bdbbc1a856bd441f4ed9d7ca875e9d24f80bbf65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145922 Malicious code in package-auth-xanthus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68cc5375476c81c36c83cc97476d3cee652e85e96e6b4b8bc0d89151dce75e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147609 Malicious code in sagitta-polaris-markdownlint-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ada06cf4bada5df5defef68478de548bcf7148fe39f7c3cb5dfa4e16d3ecbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147104 Malicious code in redis-install-xml-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d829a1e2ff41521392076b69e3c830de2f7537640987017337f47472c4500b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146777 Malicious code in publish-carina-centauri-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c07122800749f613dd46f580699227bc1e00d0069027dc2215f340c2bb00f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-miranda-dotenv-safe-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80317c7fc94a190b4d25aed1cf7debd1e50850ffdba9006e735040a27210339c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145644 Malicious code in norma-iota-superagent-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317515e396939c7b4116b7f35bbb26a114b0293b399cec840e983081cd5c2b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149770 Malicious code in yakutsk-html-webpack-plugin-koa-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0318917796ae63cd084347e53a572874ffb930573ff36461e8af28c5b169c5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145794 Malicious code in odin-grus-rigel-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a756eb41b87e1ab320a650e477863fcc7edbdc9c4a284b3976c2468ae303845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149200 Malicious code in vuepress-rollup-plugin-bootes-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459bba9d11d9ac0d287ffc425c6ef388ffc1edc035bb30a831d617d5e190d4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146202 Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc91661a591ce06363d9a044e03d074a45545f80c73bb0fa7a69204a4a2561b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146084 Malicious code in perseus-epimetheus-module-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e5beda10712a97e1605af146abe0abe0195f65d2c18776867fc375b4753ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142853 Malicious code in gatsby-vuetify-development-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115d3938de17f161d1328e3a01824c8b612e47fb942519a31d5f247322903bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139915 Malicious code in barnard-nova-sass-loader-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b57c9e983fd48309f566dee903920286b373bc535312593f2305034cd2ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140044 Malicious code in blitz-enceladus-ophiuchus-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367e5ffad151138012cb4919f2290fdc248dd5eafaccc502f6fd5d421ba0c35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143435 Malicious code in hydra-betelgeuse-prompts-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37548852b9e2e29fa1352326410220aa2022e5a048d2bfbe0c8336622f649fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145999 Malicious code in pavo-hugo-winston-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bfdf061a2794f8911e73a0f36fd0d80603c5fed1800c355ddc0f4ef97e5a82c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147678 Malicious code in sass-loader-native-jsonp-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721529421aaeef8accb9c675072bf8c91146dda70fecc5f4ea3d58ee3727c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148482 Malicious code in taurus-uninstall-commitizen-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1a682f716f356bb60bb19ca4b742e28e0a2f687bd3c65928b836c790d0f8fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...