MAL-2025-147180 Malicious code in rehype-procyon-tethys-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad506c5fa209f17fb6c2d1c69360e696d326b007be2923e5570d9e7913a54fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143225 Malicious code in helios-algol-norma-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fd6e85b9e1976f017059caf3a99dfac7420a381fbf45cc11c46863a194d26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147516 Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5763019dd989f8dbbf267900bfeb1126a620a032c9813daaca52b3a21676a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143686 Malicious code in install-spinner-dagda-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c279966d85af2513de0e15fb02e3c285bc0569db9813fc0f1d2194166881e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146633 Malicious code in promise-bellatrix-helios-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2bc2261e80b41b4ab426dc70dd2937838890d8d5ea543a3819a37e3e44e920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149018 Malicious code in upgrade-jovian-yakutsk-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942daf1809f1a933ec556875072240b54cce259a5cafdd8782ecc48976749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148292 Malicious code in stop-dactyl-native-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e75d4c1b12be6cab04ee7f5ac141232ed1154e896eae56fd8e00baf86a39cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142692 Malicious code in framework-quasar-spawn-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf3c1ced05681da6b00f91ff5765d1da4c60751cf4ae4ef9f608e00d15fc266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143613 Malicious code in init-antares-deneb-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf06fd9688c77aeaeb15ff5608ce4a1fee14ee26aa826fd990a8f62ba09ced6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145475 Malicious code in nightwatch-node-config-node-config-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c474c424b69fafd765d12e27755c0381c66b0f348f254abc2bd4a1dc5aa1273c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148930 Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3a485ba71bf8141e3c611d37b28d38f948007f335340e0dd9e887ec7be1298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143537 Malicious code in impulse-chalk-browserify-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4135ccaa60e37d9c574a7f14ef998a716328721b7261309164bfd5c329e6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141186 Malicious code in cosmiconfig-meteor-draco-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4172ff3a9ecb3394a2c362a7510ce7874c7fc1f9cb335e665212ae60a9707b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147923 Malicious code in shelljs-nightmare-perseus-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddeb1bc1a009697c0a34a92327586e0fafa7ac89a758b39af0e3d7cfccb123b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143759 Malicious code in izar-mdx-csrf-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd48dce86c37a361649e24f14a11f5ae82095ea0c041fb843b7deb540d94869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149712 Malicious code in xerxes-ora-neptune-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb0059a18193b612f677898d5f447772d729b943e67241154d60529dbf2036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147547 Malicious code in run-script-metalsmith-init-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91de0853403d774154829e0e027f6d2027c5991560bd939c3f3c8b030fc3fb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141458 Malicious code in dactyl-webpack-loopback-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1b72b113f1eb154c1f62e42afa4cfbf203d67582c7f78aee71fcc624891b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142546 Malicious code in fomalhaut-lyra-public-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554f92f32e9f1975ef75e2126185f9e18aa72351820f046d97f9c6bfaefa4c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140706 Malicious code in chariklo-pegasus-ceres-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38cce7f7f73b27d1ed49505cebba1b4895214e8d3f89254d23015ae6620fd55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...