MAL-2025-149801 Malicious code in yaml-polaris-loop-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5dea1ed6a0ab78b929231fb50636b81477ff4ce75ea8c5dbba76e18abfc479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146633 Malicious code in promise-bellatrix-helios-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2bc2261e80b41b4ab426dc70dd2937838890d8d5ea543a3819a37e3e44e920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144135 Malicious code in kastra-version-sagitta-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3ad7629526512c8e8094dc1e6a642a0a45b7f8f0b9d35bcec3a523d57cc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142723 Malicious code in fusion-barnard-vortex-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc006a1619b4883238ee51f3a4e4ac2d1b8e1e5c6068d0f991ce840da14dafb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147825 Malicious code in semantic-release-fornax-xerxes-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccde657a05676a3e3b9f919622689ae943a012f86450f132569c5866c8e60b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146974 Malicious code in query-nconf-jekyll-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d0fc63dc21894114714a30fe30cff98bf7a4269faab536cc5cfd3dc729ee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140113 Malicious code in bootstrap-link-pino-pretty-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b1ad1f4bd0a9eea1be9a5facc0abeb0284827a5e7994ce9dea62af1df74e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149581 Malicious code in writable-supervisor-zenobia-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50daf5591e2972fde227a78418365d4f057660287ba31db763855088858763ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142893 Malicious code in gemini-callisto-regulus-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9c15b620dc27ae7d09f0800168a33bee4e27d7024b3a940b2849bc637dc10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144701 Malicious code in markdown-pdf-ora-despina-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a575f4f0b31402aad3a9359cc6ccbee516874d462e15dfba45ffd8d8e186130e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140797 Malicious code in cli-ganymede-markdownlint-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f45a229869b86e2b0dfaa4ec720323de49cc23649bd8f85575228616c9843dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141044 Malicious code in config-xenos-procyon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e11ee2587ab693fa07da5ba1b7292c5c142aedc22b57b70a9ab70a5176f3aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143841 Malicious code in janus-wezen-firebase-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce52a5e7deacd99a94aed248457563529af50decd47d736ec8e125d092e3b959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145170 Malicious code in morgan-browserify-install-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0347568bd4177056426b3477b7d55efb1804f72f2a55caddd63efe23dead5104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147101 Malicious code in redis-gulp-lynx-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddfd9b7191654eb3387ba8d4a8c42bc2d8f476f01b89d97689ab344c8dc826f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139728 Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140217 Malicious code in bulma-link-vortex-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43647bfa144b5aaa124e69aaa2e4b77a1e9c17269cabbcdf9c2ecb491450ab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142269 Malicious code in europa-google-typeorm-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646c3cbb9826e253ae7bd67a3f6e6c0faddb21b017db2b59cf241dc532bdd262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149226 Malicious code in vulcan-commitlint-taurus-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d629907d31f3bf20f5b40c5e2a33a188fb1a96ef7721e2b92c263ec7667de22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...