MAL-2025-140687 Malicious code in changelog-taurus-registry-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53159aea5ce380db3b88eb4598bc7c2b20a6594b39b1036b1ee6c316805d286f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145155 Malicious code in mongoose-javascript-cosmiconfig-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0460219f1419054f30e265dadd5b11cfe5e7dd6e47ccaa607a01958dc356c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143868 Malicious code in jasmine-typeorm-rimraf-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8a392fb62946ebfa7bf33c9cdc619ac1d918dd0e4e847bcf89234e2b4acbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147594 Malicious code in sagitta-elara-yonder-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fee22a1d8c332151e77e19d5f4de43f8842efedccdbab6bf08ba69d58d5140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141502 Malicious code in deimos-ophiuchus-eslint-plugin-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b40fd7a23bb29d3df2d7075a1262538a7fe1af94fdb1dac97f470ccd96c52a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149794 Malicious code in yaml-loopback-cors-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4a31ef0bb41cbcf9f53fde2c2e8f87b92c8c818e43d8d884ff63988175d9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143374 Malicious code in html-webpack-plugin-transform-google-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142824 Malicious code in ganymede-titan-rollup-plugin-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9413cd573eaf0605e0ffed7a4a693e158084145957dfbc0cd50f5112ad02e331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143360 Malicious code in html-webpack-plugin-epimetheus-async-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fb35774bf18006575735aea11ab5c4dcb09ac172c921835ee6157fbd4dccbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146366 Malicious code in polaris-shelljs-jekyll-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de091a3968f27ce74c81fbe514c2fa98c46ffdd8b63a1a10948c72140895732c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139315 Malicious code in alphard-altair-jupiter-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb92c5e4220e85a5166f8dd8864e3cf2ef13901c30cca040dca1b12763f4c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142678 Malicious code in framework-dactyl-exec-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e093d0cc7d469c010330f2fae3ee59791663210739ce726a1470a5457e8ad63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143171 Malicious code in halley-vulcan-nightwatch-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba8459812b58b3adb0a734a6bc6f6acbcea1e099036c9801ce7b9bc035bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149129 Malicious code in version-achernar-nightwatch-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9642aa3daebd57c9b6eab0edb71eb31b68b0c1922c4f298ed95d98b9da1aef15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146300 Malicious code in pm2-helios-alphard-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbd0a5ef1720a24c70a5716ae1225fbfb47159986dcafe4406907eb91fcb371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144731 Malicious code in markdownlint-start-materialize-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b86e7289af41e3713ee478fd25844f6004df8c4ad8c5ecdc276dcd607a7588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147095 Malicious code in redis-ariel-metalsmith-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b844964fd291954949992c475a4a551e19be53976c952aa0fcd19da0cbc97fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142215 Malicious code in eslint-csv-galaxy-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd45e16c796e796ce2867f6edaf3c1ecb8afd063eb8315db7cf688fcfe950107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146046 Malicious code in pegasus-publish-mongoose-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ceca5bf5ad3eeb9dc535efb9f2ed64bca85aa519539a639405784791be1baae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...