MAL-2025-146002 Malicious code in pavo-miranda-oberon-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e045e078de01e3ce8c9a68defd2bebe8212d9bf603e6dc9faa91cdda033f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144950 Malicious code in middleware-despina-geckodriver-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51bcf9b0a4564225e487b23317e9819ec1bd08d84ecbcd8de05f87a50369de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139906 Malicious code in barnard-frontend-airbnb-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8339c9cd9d0b4161213a33a73d83df39141d50d2f1ab4160e0efd9edc755a254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145639 Malicious code in norma-cz-conventional-changelog-changelog-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72c73c24102a1ea8e836ef5ee6740a543a940fefc68ab2f2ec513b98fe55f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142215 Malicious code in eslint-csv-galaxy-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd45e16c796e796ce2867f6edaf3c1ecb8afd063eb8315db7cf688fcfe950107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139675 Malicious code in auriga-dotenv-draco-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9b2da508ce5e3cd0f2e4e939e92d8107d8b398972b460a825cdeabd47542ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141014 Malicious code in concurrently-standard-bellatrix-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff872f994bfa9e09bcac8fa5dae43c126048766989a5501ddd911c41cc1fcaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146901 Malicious code in quantum-deimos-colors-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a78a3e303545fe7a4cf7c007b28503496a490a019602bff17224b9d992cec9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139245 Malicious code in aether-vulcan-nightwatch-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81184e70ff47e3120c3a33be222f6fd072ba6b272cbaa3a37f782fa9b7107289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144167 Malicious code in kinetic-delphinus-farout-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f370a395c2d47ea909b67d7db2433dbcdc997442f2a384b050ea0c2e241a773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139822 Malicious code in axios-concurrently-loglevel-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34761219db83109baffd93ff8ab4687bdfcd514a0d33561151bdc2f3c0306bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147095 Malicious code in redis-ariel-metalsmith-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b844964fd291954949992c475a4a551e19be53976c952aa0fcd19da0cbc97fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144453 Malicious code in lint-staged-despina-async-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7945446fa469f4ab212c7c15865d5e21bc2ebbaf53d61f9368e81a8b86fbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144953 Malicious code in middleware-electron-builder-arcturus-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0a89d2d72c450e8537ac1c28fde5acfb85995789697e16a6b4793a011ce5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139909 Malicious code in barnard-izar-castor-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a0a7c2000bdd07f91cd07e1229e7af2f56859178e4a5c36f9e5c9f818c0b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140317 Malicious code in callback-shelljs-antares-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0876a1e9a989b814de994507e31ad710b808c14b7261df61127483c6978c547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140230 Malicious code in bulma-ultra-meteor-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdfd1deafb4b573097ef89a887d9922514d7aceab4f029d5853fcc750934733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141148 Malicious code in corvus-corvus-atlas-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc931c001a969e7ec61a962f459ddf810a83bfaaf634d60d45f190c942681170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...