MAL-2025-142984 Malicious code in got-release-it-nodemon-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2424016c8ee5e47eacbc475dc2f28d025a81a82cbae0be1a60689f3d65c1ba49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144439 Malicious code in lint-hapi-stop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06034557f70b334c9c54b7ae8eeaea3fecdc5515f5f60638224fd9b47f87a83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147434 Malicious code in rigel-magellan-dotenv-parse-variables-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe093cac103df96e3cf63a8bdf1cd5e9699d5cab258f8a183b4539d9dfcf564e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143486 Malicious code in hyperion-markdown-process-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536192c36618e27ff8830d058e31380e4431d9840dd8c3106a5eb2f8bc58953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146203 Malicious code in phoenix-ophiuchus-webdriver-mocha-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc99ba026da8566d257a516cae1495a6154a7a20dbfb8f5dcb605c6e138958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147369 Malicious code in rest-ursa-chalk-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa48b21337ae065011cc4a71ebeee38451dbc5d83d5039acf8de668c616f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140794 Malicious code in cli-electron-builder-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565605b8fcdb03d5352356ad7f15ffc45159ec0491f1a7de8d9824bb1a36ac6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141817 Malicious code in duplex-perseus-local-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89edfd1d9823ff5760892e24d7c7e222e5826fe1bd7fed01a812dbdef635600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148812 Malicious code in triton-cosmos-await-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32003048b64cbf0ba382212601b68989e55369fd2e497056999091ee16297a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146926 Malicious code in quark-html-webpack-plugin-farout-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8601e78b8d2dfed9130bd47aa2752133e6926bb319210973f17abba74f8c4aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148006 Malicious code in slidev-io-bellatrix-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d0d4992318581ef24ab6d35f823720615179955fd0c5aff8c9e63aae72f5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148423 Malicious code in sync-envconfig-apollo-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0522e5416d0c39f55f4726793f21f5ee783f6cd714aa945b7a8b701df0ae65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145605 Malicious code in non-blocking-colors-xml-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7c05a91dd751ebc574c9fafe6c079484def23e71f2a4ea9eb425dd310c652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148040 Malicious code in soap-winston-antares-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4d78de5a7e83ac0f3732587e429926c070200f55ddc3718d36e34b490d7f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139832 Malicious code in axios-karma-mensa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410722a9393688cd5d9c27ae34b34821e0521572820fd9dba34e1116e0e430f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142918 Malicious code in gemini-server-ini-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5d0360722cdc73ccb7eac133b17b09cfa918f7f0436c2a0cfa464bd4b5a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147105 Malicious code in redis-izar-react-bootstrap-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6cef921bda83e71f83929fb9be55ab26d6215bfeb47a5eb031441652b002d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140921 Malicious code in command-scorpius-octans-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703d0a719bc5af84b7e2aef0b2df611546d2041a15a9d8bc5055dcc5fa5c5b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147441 Malicious code in rigel-tailwindcss-electron-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77df21c4788f9beed086cb88985b131d710bcd6382aa8167fedc0aac70f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149099 Malicious code in vega-supervisor-exec-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b36eecda9d3527991832751c533eeff3acb6d01350295eb3cbc83637ae07ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...