MAL-2025-143412 Malicious code in husky-child-process-lint-staged-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d03a106828f6507da5ded4d486c87ee74293ac205b21b7d112739c94a367fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139724 Malicious code in auth-middleware-phoebe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3e51978571ca4dfff349d756ffbe01b1a5025c948ec27206dac4551be7b695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147863 Malicious code in sequelize-convict-wasat-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8a371ffec811bbe299709921e05c8eb65ef5d526eb298988dbcbb38588651b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139701 Malicious code in aurora-luna-ophiuchus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7529c8b52158312b60e08e1fc053d2008b88292b60a340f064f9c5321f2c53c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145503 Malicious code in node-config-ariel-cosmiconfig-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142669 Malicious code in foundation-canopus-charon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ae315c9f2f6c6650ed867026c7352f7ad0f33a06976f649b4fa2cf022f67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147809 Malicious code in selenium-pm2-titan-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a375b6e8a49525e6d29e4cea8e78cf47628833fefc78b632b4338ed37974e777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149062 Malicious code in ursa-loopback-start-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b25c5a49bd65dbc94fc59c560e21bfdcc8bd4f0963dc090dff5f430428d54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146331 Malicious code in polaris-cordelia-jekyll-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92770264ec80fb27b4cd47c4c41cf2cc5b9617c694833736cf037433d29e2078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144447 Malicious code in lint-staged-blaze-concurrently-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c264da9ee153bfc81c5d7023d782b5e52b2e8e8b64216fe7ac06aa6fdb1d3df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140481 Malicious code in castor-andromeda-spawn-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a5dee896748b52c2d7d49f76d856e114537060fe2f8e84d7e7a1bba31b762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144379 Malicious code in library-magellan-telesto-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d155bb64f62032962b5f0496237c836db5c08bdb318de1c08938445eec8bd254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145294 Malicious code in native-quito-venus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cd3182705b88c0e14381b43792c9118b4bafb5d433ada79eafddb31bd3afa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142716 Malicious code in frontend-quark-antares-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2705edc75fdc673a8224482fad5b553e46f7fcd696e1c16c4557c29c33efa292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140263 Malicious code in cache-auth0-ceres-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef0aceae319d91d9ce1a3007bdbf7f467f94b6911605406bf858258ecc79e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140746 Malicious code in child-process-foundation-eclipse-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c4f59859c4a243e08dd39070370b2f65a3c8c6d979f8032023e0bd0b311b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143371 Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b8fdb4d679e44dce5f94d31b2b02d247d6d9cadee2a0d6ef9711492a2d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144046 Malicious code in juno-zenobia-kinetic-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cda1f7e16474f4db77e1627311d6c2a20cf414dbecf946bfc210bf918669d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149870 Malicious code in zenobia-nodejs-sass-loader-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4612b348f54e7b925fedd6e8bf99644e18a6cda4dc4e08b72f5925baae34e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139240 Malicious code in aether-promise-airbnb-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52083ff1210db5c0190ea675543f7b26ee8b659b12480c04548f5902aec8103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...