MAL-2025-147022 Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141486 Malicious code in dagda-server-writable-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae875b5316c762804cbf34948832e6ac8d9e8e240e5ae1343644ef305b5fd088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146455 Malicious code in prettier-await-sedna-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da20979527e65cdb03261ee8581c9c8260077ed1257406601373d8afa2819e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141423 Malicious code in cz-conventional-changelog-kastra-rollup-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e9525cff2d4f497c1e161782ad3e5478832085c188b7182639221632cc9fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139513 Malicious code in apollo-fornax-parcel-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4428990b52194111194eed7d777050d56daa9124b291ecad8271bf7dd940afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142480 Malicious code in figures-protractor-changelog-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6927adefae2b36f27f179178319310ec17e61ada0fa07dde6c9c2c00d2085a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143373 Malicious code in html-webpack-plugin-sync-perseus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d54e21caa1696cf3cef247fe0d1e27b9dc0c37818e8ab73e05d4850ef300030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149418 Malicious code in websockets-cluster-puppeteer-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ceaad475d9d955f6b6f6dbade90cab89f4baf78f94279c6647fce157b11494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145991 Malicious code in pavo-backend-neptune-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f009fc94282448f94d549e5083edd53f17a564701a16a40d3fe4789833cff28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141841 Malicious code in dynamo-ursa-soap-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c42154cb3d3d4f013e199a8286637184259cc713fcc3019d47b1fba096b9e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140772 Malicious code in chromedriver-foundation-ophiuchus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734cc0e1a4fdbcbaa4277defdafd1411ff42c898978cefc6ce410b296ec7f58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144847 Malicious code in mensa-deneb-global-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94006735c0fb8be6b84ac51781bc561692d741114695724b97d8ffc837eca3c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146412 Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140343 Malicious code in callisto-oauth-rimraf-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b65ecf31bd469e11e4da7810c1f0f232b30db6958c9b2137eb22895f805e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148649 Malicious code in thuban-dotenv-safe-rigel-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccc363bda7653032d1ec59093033ea188b057325b09bef82a64b31336370d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145734 Malicious code in oauth-inquirer-farout-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9db7a24ba980ff244f86a02b8ad82e55ff706357f0b6416a7a3c744de8ced2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139360 Malicious code in altair-promise-castor-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c3a1a5a4ff845ee380e66cb7b5ce3ba889f5afd50a6a1ea2e02fd6f0783031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141495 Malicious code in deimos-gulp-convict-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82800254ff99ec92da273a62b425cf6c2d0e2c9bc1c238bb30e856e0ce4c9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149592 Malicious code in xanadu-comet-nodejs-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c8b88537d70aec0a919a25e1ff2865a738eec203cf17419753dbc477806aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145196 Malicious code in mui-carpo-publish-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2be34a3c332013cc6fbf0b15eebd1688174c135148bd0bc0053a46ddf30815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...