MAL-2025-139376 Malicious code in andromeda-dagda-mui-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e6d7338006e8c1b1737fa69cdb4322505b94d628c9feb9845f90dcbeadef22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145098 Malicious code in module-axios-quantum-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f6bd21355a28e1a55a360406e042390d82af333069078c05be4324ebaac7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148375 Malicious code in superagent-castor-mongoose-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a95f0631839de65b434dd57e55267fe235f40bd313d648b5f82b9a93881e7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149588 Malicious code in xanadu-await-rehype-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb456e8d781aa45a1dacbf7f30970b88acc27ae993d3a50689322268cf4fcef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145934 Malicious code in package-karma-europa-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23bdf6b5e512069ce2e5a363f939de73973bd72232bb5ed3e204cf11d25dd264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145113 Malicious code in module-polaris-dactyl-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a72463d4d1200e3476f7c45575a7a197213739bf5954a2109210a8d2d91f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145768 Malicious code in octans-dagda-winston-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896316fc7d2ff80226f0bb3d262ae8bed0818fb9a42f3d7bde21fff4fcc37e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147968 Malicious code in sirius-prettier-stylelint-dotenv-parse-variables-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611e5e66a2dadc8e4f679552552d528775057968cb7051d625d46e870b5fd204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148839 Malicious code in typeorm-chalk-eslint-config-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aff76e9e3c4abaacbab53d2925a5beaf6123e1fb7c7b9f1188e19683a502889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140745 Malicious code in child-process-fornax-ophiuchus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e14ba578f9389f96c9befb8dff2098b3c6d0e1be62aca0d7dfb57d570ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146975 Malicious code in query-nightmare-cz-conventional-changelog-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cc8ecc2df26572d2d756d4488d3a7ef0335615944d3c536fd7e736160acee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144807 Malicious code in meissa-heka-wolf-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303ff4a59d56a3eaa154f024f1234b48e7c42b6f0addcc29a1998dfc7c7cc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147578 Malicious code in sadr-upgrade-airbnb-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc82bd40d74505d643d24b7f73aa5b7ecceb707e680b6eaf31a2fecd6cda9766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-bunyan-selenium-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbf6cfd3f3b1fe6e04e80d1120452bdc3262f19277791c0d067efd9c340506c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143486 Malicious code in hyperion-markdown-process-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536192c36618e27ff8830d058e31380e4431d9840dd8c3106a5eb2f8bc58953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-uglify-js-ophiuchus-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3763d689299b26c905a36ddfa3ea5740c798a3ebbf3ae26b8f4a1e4150c295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147525 Malicious code in rollup-plugin-virgo-uninstall-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cc1cd4a3e777bd49016825a24c4c7a755c151eb512398e15a68e7353828ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147609 Malicious code in sagitta-polaris-markdownlint-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ada06cf4bada5df5defef68478de548bcf7148fe39f7c3cb5dfa4e16d3ecbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145232 Malicious code in mutation-spectron-elektra-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfc5d8be3241831b91454e7c38a3c68b1bd22f5176c552f8e6f778fdcaa045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140880 Malicious code in comet-materialize-hermes-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988f0f6bed7c9829fc6dd7e606fbbd189ed26bde48bd3afbbdc2023c20065626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...