MAL-2025-146472 Malicious code in prettier-nuxtjs-metalsmith-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc0530eb1ad39700c42120f582e87d6140918e039de76026941107c4042d0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144736 Malicious code in materialize-celeste-eridanus-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d702a92f89ce951ed0dd9e020041f48c12217dd201c89f2cabf03056e73fae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142303 Malicious code in event-aldebaran-nightmare-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd78dda52ef11c256ab005616998f64e0293229ae1c26709e75fb37b2b77547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142147 Malicious code in eridanus-install-supervisor-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1376bd5cb9c0baf92baabed9c0684dc0c88040e298eda6fe848c4b721834c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142682 Malicious code in framework-halley-phoebe-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a41b1cea0e8542243eb3f72e7489fb8f21eecd41fe1e4965a1acfe533e66c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144961 Malicious code in middleware-mongodb-leda-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac868d322cce021ae4cda8e245af3f8fa418596dc7f29ba457f1caaf7666878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146842 Malicious code in pulsar-radiant-cypress-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178bfda625ae6afb0496687a9c92e24aae195151c40703d0a50c6408ee55d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148375 Malicious code in superagent-castor-mongoose-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a95f0631839de65b434dd57e55267fe235f40bd313d648b5f82b9a93881e7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144819 Malicious code in meissa-ophiuchus-less-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8518a814cafbac1fe3b24bde9c440231a89ec97e3377a71c305e1bb5c795f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148399 Malicious code in supervisor-pm2-phoebe-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5149d22e1e90da59bfbf90b2942e07d4d2189b45634af8923084ab8304f538b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144743 Malicious code in materialize-fork-redis-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7330231bd4ca11a5cda133e886e1e711021f7dc403545ca5b0527970ceeb58b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145204 Malicious code in mui-mysql-mysql-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089dc09fc9fb3f57c1f9e78a954418a64a29db65194c700ebe3e78748d414fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147862 Malicious code in sequelize-auth0-publish-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7997c1594e3c8ca4516fdc5903416d5f8cdf4e40750e3fc69f596f4832c1ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149422 Malicious code in websockets-graphql-regulus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbda8427ea6dbb869b1b65944d6ea5190110070e68da12643f4631637ca0a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143505 Malicious code in ignite-antares-terser-webpack-plugin-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678314a42cd5410b1e3b55dcfe9468f7b009c2bf1126ee336cfd1b2dbbdc65a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142296 Malicious code in europa-typeorm-kinetic-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d512a5890a5e44305f9e42c721f56e63174ef7241f3f019714063a09e284e7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149406 Malicious code in webpack-rimraf-eris-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf70ed59506b87bb301e207eb1834afa3b553ef1cdcd022c7e11d77fda8abe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147259 Malicious code in repository-canopus-csrf-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57df37eeb7e187b75a267e5bee180848261635a3aa7cba4cddb584697124456d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145277 Malicious code in nashira-juno-markdown-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0341b08d5f2ccd87fa18915de455941efd4dc2d2bf55d556c366ea0889c11f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148617 Malicious code in tethys-enif-nconf-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799881d4131b02e60faafb9b9e35aa3e419a470cb3672d5b78292cc00b780831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...