MAL-2025-146975 Malicious code in query-nightmare-cz-conventional-changelog-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cc8ecc2df26572d2d756d4488d3a7ef0335615944d3c536fd7e736160acee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145542 Malicious code in node-sass-google-node-sass-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916a91c4d8ed0d001a8049bf53130bc5cee5f30c571b7bbcebcb9ee50036dabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141971 Malicious code in element-ui-jwt-uninstall-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5a60826ce2dae0b128158911da5fd082c31135b1f850b0e1134ec983ed2dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147578 Malicious code in sadr-upgrade-airbnb-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc82bd40d74505d643d24b7f73aa5b7ecceb707e680b6eaf31a2fecd6cda9766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140258 Malicious code in bunyan-umbriel-relay-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f3f063c2281fff1e1b70c86da2fc195585d3c059d7911720de2e6ad6746f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141912 Malicious code in electron-builder-spica-halley-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c33cebd4c8758db9baccad9a14ccf7c4c7f5fa9cea61bf0d798a2277d41bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147609 Malicious code in sagitta-polaris-markdownlint-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ada06cf4bada5df5defef68478de548bcf7148fe39f7c3cb5dfa4e16d3ecbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149500 Malicious code in winston-izar-winston-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b9406e604fc2c6303c12f06f2160878421f2a4257836f24b73c851fa490122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145773 Malicious code in octans-juno-magellan-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c8055fa385eb1801b30877d2f32660100e939a3a9190474814127bda71f996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144679 Malicious code in markdown-apollo-transform-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db4084e821d24264fb92353f0cffb2bb312a7254a0f0a8069c3ffa278f517e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142478 Malicious code in figures-postgres-tailwindcss-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddba4bd4bfff12e648a4581a1488a5f2375d47369a591a774a8958438c79459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141996 Malicious code in eleventy-envconfig-xml-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b303cfab127f5de13e9ddbdc9cfbd359b52b49413136ffa41fc2ce9ad4d257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141732 Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9c03c53a96b3a1aa932f003782deaf85651c39cb3869bece3e210ab9492631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142799 Malicious code in ganymede-epimetheus-terser-webpack-plugin-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d3c3743af2962a1cc129f96e63d2dfb37e17bc2c226e24a59dcef2c0887915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140651 Malicious code in chalk-orbit-dynamo-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca30097d082087dd40ce6bece08a2fe444de12b0eb30b4dfcb180ae3be49a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141764 Malicious code in dotenv-safe-non-blocking-bellatrix-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f3a0f41e22eeffe8e03617d54458f2fef81c61cb1d871598a3c4f76542fc27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147132 Malicious code in registry-pegasus-ganymede-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65afe8cfd85ae35917f7bd628db75ee6071d0dbee2b3c66a8420d9dcea9117b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145922 Malicious code in package-auth-xanthus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68cc5375476c81c36c83cc97476d3cee652e85e96e6b4b8bc0d89151dce75e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145972 Malicious code in parcel-spawn-dotenv-parse-variables-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed298e63ca52c57450c7e91203459cb0de3fb49027e441425ea32d0c6cb9db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147042 Malicious code in rate-limiter-loop-npm-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06092420b8957a0da75aae83861ae673c840b2bcfa86993780d030e2509e0261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...