MAL-2025-141166 Malicious code in corvus-readable-cluster-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c703b164d6f08800f2448b0ab59f117eaa082c46ca937563ffc6be031c94526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146921 Malicious code in quark-child-process-mongodb-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0521d8f1c77a106749e2b261ebae8d051bf9972ef5fdf1cef5a35bda7c0dae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145224 Malicious code in mutation-ganymede-proxima-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3528842534dd10aa2d17333987b5c806f6eb520cfd49588cb9f587b849f61014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143385 Malicious code in hugo-delphinus-mini-css-extract-plugin-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcce134916e9f9c15c5c57472e9bcb03256befc163c2ef8dbc09f3775477df56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139238 Malicious code in aether-prettier-stylelint-umbriel-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcb4c250a746096bf08c2614533edd41b7fc959a5b0076e9c614a1a1be597a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140092 Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143324 Malicious code in hermes-relay-mensa-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b7840f7cacb1472b789652d724c055490d06c02148c37251adb38ffaeff035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145810 Malicious code in ophiuchus-chai-standard-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ff30be482fd254786af5632794902b68dcc17f3312a77d047101242c71adea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149358 Malicious code in webdriver-mocha-nashira-aurora-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb31fd775f1268ae9f1b1b064a05a45c2af095dc6bd9245bf60669d8cdf8df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142009 Malicious code in eleventy-nodejs-luna-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1486a66135cac5985712266daa0e8bfb7dfb03a6066e19fe907090c033b4000b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148497 Malicious code in telesto-phoebe-install-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca69426eff1d249ca3c975a14bab407ffd9be509f4fc2b5a44e0fe44204d5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144676 Malicious code in magellan-xenon-bootes-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62df206e0c637e4fdc9672598ac3b8880e4bfc6880a5cbe40eb17ad429a7520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142965 Malicious code in google-magellan-config-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1381d36d49061952c1f910630b1e1936b3bc590e02317d6cfb75526024ba2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145445 Malicious code in nightmare-rigel-playwright-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c7efc41fad8d61f889b7eebf60a8ddb47d40233875ab87da2ce0fd87cbef8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145805 Malicious code in ophiuchus-ariel-module-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c391e8f0c4d182e0ee74a77408ac92268fc1e3afaa7723f59978fa70995279be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144380 Malicious code in library-markdown-proxima-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9c2073aae74647e97388d9c473e9c7c2d900d2eeb496eefa9b2a58d0a3f326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139494 Malicious code in apollo-await-europa-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8a7514dd74e4526d98056ea8c49af7d439e92bcb204bde01f5cf4fe3e6e845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144913 Malicious code in meteor-html-webpack-plugin-mui-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ba44be2ccd673c3f19ceb7a542f761f31250400b8f3caa7ffa5327a7e58323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145345 Malicious code in nebula-janus-parcel-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dc02b3853dcb408378255697f28364b8450c949b8e88a32ddda404c5b41fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149036 Malicious code in upgrade-vuepress-pm2-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4aa83789c0e6a054547a1cf51bf16cf72c40d7b36e6ff05521271570800e1be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...