MAL-2025-142097 Malicious code in epimetheus-library-framework-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8685869bd43d0c7731b440d9340f7d9cbbb1f65bd22794c61ba2fea0e098a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145453 Malicious code in nightwatch-achernar-cordelia-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105fc85e072ece9fd5861361f709213a2b73b7a1f06aecff21a9576fc64a26ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140201 Malicious code in bulma-airbnb-node-sass-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05b2ac08868e6c7fd670b15b48fec5a3be342154aa5b9a86612c8413c16242a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144128 Malicious code in kastra-procyon-typeorm-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4d0f7fa85bbb01f6eeff4ae6595e8321f9e5b9f3a6f7618c0ee33813ad89a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143360 Malicious code in html-webpack-plugin-epimetheus-async-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fb35774bf18006575735aea11ab5c4dcb09ac172c921835ee6157fbd4dccbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149818 Malicious code in yildun-nova-leda-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05ae0cdb022e3b71301a0323b96a75c7edd172085ff157e6da24b348969c13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148433 Malicious code in sync-sedna-titan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21b6da689a26b9fc953c4b51dcbd64b26126504fefc42aca279aa0cee6f1b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140242 Malicious code in bunyan-gridsome-init-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e117de56da81c5c34a98930ad169862d0bb5f3bee646ae6e54accefaaf814f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149635 Malicious code in xanthus-rehype-sagitta-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef357f0f0dc562b08c3cf8f51a92672a8a6aab70dcf038eef02ac1f1eede87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145373 Malicious code in neptune-phoebe-octans-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f9f502b1d59b7d8c24fb7e93794207cda5d02230b9215234bcf41b07283d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149528 Malicious code in winston-sqlite-typeorm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0583ba8d9067af98e95c066865b38f493fe46011683758f8afbd70d2cea4b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140792 Malicious code in cli-dactyl-restart-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e4eca5980d748e273b5ae71572bacf25be9a4a96d84712a0984c38431372d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148050 Malicious code in socketio-eris-delphinus-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc71ddc3dcf1582b910c6e15c26a077a5a4e6f1e21b3f00fd3f1b8e02ee14dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146396 Malicious code in postcss-loader-galaxy-kaus-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5605ce3f0a50e3f5b0c6a7049fc8fd2af1a76c911b137becc0bba57bb16761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146564 Malicious code in process-prettier-plugin-markdown-ganymede-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa72f918996786d3235c35e1d15645cdc1aba81c886ed26e2d88453654fca1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145423 Malicious code in nextjs-procyon-postcss-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e01c23ae81811c86732763e0d2d2158dde05a07a044c0da8c5f141775f2224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149655 Malicious code in xenon-oberon-semantic-release-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0928c9c81d167db71db3f299e5566b1a13b3aee1d5842453431229e9ecbcf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147547 Malicious code in run-script-metalsmith-init-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91de0853403d774154829e0e027f6d2027c5991560bd939c3f3c8b030fc3fb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143816 Malicious code in janus-magellan-quark-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696fbfcd478350fa5c64c1d68b7c5502ad6df5cf972b8cf3e69c7f0d811eb85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141236 Malicious code in cressida-loop-regulus-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff2ef0ff2ed716a9444c8d00976ad31a124b97aeeffd1954863b551d3f09866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...