MAL-2025-142255 Malicious code in eslint-webpack-celeste-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa12f890f68cbb366704ee095227553735267d49479da3997e9aa7a3e69d9b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147688 Malicious code in schema-arcturus-relay-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf17e4c24c9b9e673c663e399ede376f3d5a92e1c679fb3908cadf2fa7bdf2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141774 Malicious code in dotenv-safe-quito-sagitta-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bd17f282b80e518fd36af5bd8237ddb4c4be6a734607ebdcbbb5d20ec0adee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141471 Malicious code in dagda-heka-phoebe-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e78cb483a820d8e1e8684031787f848f86aacfb5b8fd42e52305de62c17bdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143519 Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144240 Malicious code in lacerta-geckodriver-tool-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8ae917a5908e869976d6341f9b536915f6556c4e5f81dbad2c4dcd8bb32526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142324 Malicious code in event-sedna-elektra-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aaf62dc662a6d8b1068d1c49bd2b9ec972d870646a3b2987a8882ceac957b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144855 Malicious code in mensa-hydra-ophiuchus-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975502bdabe66180670d191f6d6972defd72b26fe8d949223a83143d48948ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146491 Malicious code in prettier-plugin-markdown-procyon-non-blocking-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb1748075fb5d329a6781bb4c8df60f4842b6036cf1fa90580bdc0227b1a42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146424 Malicious code in postcss-vuepress-nestjs-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089a9bf327ef0f08b1005680b1873ca15774ecd7a823578c1712213ad740d477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140029 Malicious code in blaze-private-module-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc66d2a257a4cae15833c68e90d0d126ae595afb14baa589948057e3b8b1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141716 Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139430 Malicious code in antares-perseus-indus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e171dc30c5618b4fb6ccfc0b3dc6ebf43932d473dddf05dff6be591c1695b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145789 Malicious code in odin-auth0-spica-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e2a02b14f805250844e02207a8da2c9897a344b77ef90b326bf6fc029b0590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140442 Malicious code in carpo-ganymede-yakutsk-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189d654540cef6b94c506eaa1ed104f2a336c216a56ab14ef252cff5083111b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147219 Malicious code in release-it-command-express-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66213e307184f45c99d6f5d88c283d343d707ed28fdcc2cf3fd36dc4dce28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145011 Malicious code in mira-janus-mongoose-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0171b3e4f13eb46e037d4896a616a9276aa90bacfb5cd5c1f5e85e1cc27fadda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146819 Malicious code in publish-ultra-webdriver-manager-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add34f45e373dcd2f575e70cf18bc5a1222ee39cbfbd8e89b52cf8773ad1bf2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146022 Malicious code in pegasus-csv-concurrently-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9940ea961ce5eeccf2070e02920ddc683559e1cbee364ddf03b26b769f0a03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140612 Malicious code in chakra-ui-eslint-plugin-dependencies-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e7a73390160c376cfb3e4a5257b5aac4adef6048328297cde111fdbe358c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...