MAL-2025-145742 Malicious code in oberon-centaurus-eclipse-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab928e91bad85f7e109af50b8b181746c36455110c206e998eb3ec3cb8fc7a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144281 Malicious code in leda-miranda-oberon-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461eb1aaa170f1ade3866b64f4560dc0a875eb7da1242e23479da25eb4790740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140700 Malicious code in chariklo-inquirer-draco-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d298f0a4427a242bbd1c9209d460665100b4d41a1f01efeb885855ed86107ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141311 Malicious code in css-loader-pm2-meissa-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad65cb01523b340d02484b6784a0e5e1544a685abd8ffac919f717fe1a13b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142781 Malicious code in gacrux-sadr-ophiuchus-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feda0291d6bed0d6bc08e9cc14832ec5fb222ee2ed5ea483dd4932982f6b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148988 Malicious code in unuk-vuepress-sagitta-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf436562229ae296fff8ff03e66e905874a0ef00f71b4363677a2245ede05009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139907 Malicious code in barnard-html-webpack-plugin-commitlint-config-angular-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cf84f490e85f93aeb7b72ac10d1b4ee6b01c6c1aceed157aa3de391b02c2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144875 Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143121 Malicious code in gulp-package-remark-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d28303a473c0b6823ee48af1ce091a49f265056bedbcccdad2bce60455ee7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144984 Malicious code in mini-css-extract-plugin-ophiuchus-lyra-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee149d2a64f1d6e8ddd300e94d9454e3a8e857f650f27a40fc08e1c517eeaa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148263 Malicious code in start-backend-delphinus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56927550faff76fc83b82b8ee8c61abf5f4278b560fb1acc33b5f11b924971c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142644 Malicious code in fornax-polaris-nodejs-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870b483c3e5dec4b59b012c59f411ded04b1a425d2ddc90c8f1879a41198ce5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148519 Malicious code in terser-europa-start-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced4de0ee71fc50e0fe52a7db3d8cbdcfb0c89d08cd2479fc3b58c46de998c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142200 Malicious code in eslint-config-got-loop-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cb477ede27d343847c0229dbba4aa87dd19cd561a5a0a308a91b247ad68dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144797 Malicious code in meissa-chakra-ui-cz-conventional-changelog-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f285c7d45797112ceab0a231619970762984e8ac052e668d9864ec4afeba50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141416 Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7bd00c7ac28604a872f9aec913094464d5a6717e2f388f33e390d88a8f4360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142472 Malicious code in figures-lacerta-ceres-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf441778c71088799e3df4f5fcc29bae87a6efe489abca752befa1db4e635cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-start-docusaurus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1aa662d0754a1dc188e33dcb602068d7a09025bfb691ea96cfc640e576690b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-nuxtjs-async-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0547138917a1647cd799533fb1a5d590a7076f852e032130c1b80b909a792139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-puppeteer-stream-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4303bb98a1d550e8a4711121441236381921c720fac30b199e2d777750f88890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...