MAL-2025-144726 Malicious code in markdownlint-procyon-magellan-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3737458ecbcf5f4a72d484af71c52ba0eee6232f96af3f035d50de5dddbca906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144189 Malicious code in koa-dependencies-jabbah-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5750ce85cbb7e819fc26e82ac21b47a1867b190764e04914ec61a42495f474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143623 Malicious code in init-halley-non-blocking-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f102816d1ca7c2c09d3c6c14aab8bd1a8a6f2a28ff7782c0f63b68d47c0a70cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144736 Malicious code in materialize-celeste-eridanus-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d702a92f89ce951ed0dd9e020041f48c12217dd201c89f2cabf03056e73fae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143214 Malicious code in heka-private-electron-builder-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efc83769ffc86634fb8641fd68519805cdc2c8c3d59fbda9c45f154c7b48d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148962 Malicious code in uninstall-magellan-enif-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b973d5193b6b7d80cf9e96848af3716b89f277d301631075300428ef40ff5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141568 Malicious code in dependencies-fusion-prettier-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b282945432c3d34eb90c67d81f9fdba5527b68fe207aa9b76015411e02c7438b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144219 Malicious code in kronos-grunt-sadr-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77e858e6d1a107decdeeaae11b5f3cac7d091cbd8cf3627ffeb3de7918adf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148565 Malicious code in test-cassini-luna-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cb101e3f9934846779c5bd46578227d090a1610d7d751f4941518c0b0295c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145895 Malicious code in ora-request-io-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9b22c5b28831c6ab3fe45a56178c6333278db25389c2d08125f9f6836adeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141376 Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146002 Malicious code in pavo-miranda-oberon-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e045e078de01e3ce8c9a68defd2bebe8212d9bf603e6dc9faa91cdda033f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149288 Malicious code in wasat-eslint-plugin-figures-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc35bbcd2f127f59b93516a803fe75b50e0406a0599ba86a9e3133cd9e8c83d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146545 Malicious code in process-airbnb-ophiuchus-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1fbead48529be1f17d300bf0b47b2d8b48e21e46fd428594c0c40900d108cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147102 Malicious code in redis-hermes-mocha-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa3503433e49e30054cd2630595517ac5f56481aa4d95e98c70613239f8bdc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145906 Malicious code in orbit-europa-dorado-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86991b0a2dcb6678d771ebd29e9bac476729c647cd6c41b03821e32b1084eed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149770 Malicious code in yakutsk-html-webpack-plugin-koa-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0318917796ae63cd084347e53a572874ffb930573ff36461e8af28c5b169c5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139402 Malicious code in antares-csrf-ignite-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfd3b91a49b333d4e3b551e825ad73ebabb48af5696ee496404e652d6a1ee9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146327 Malicious code in polaris-cache-geckodriver-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabbeb70ac312a861cee080d883f38c47e8b66b9d9798c90eda84e2aad74baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148116 Malicious code in spectron-ignite-arcturus-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02efe1bbb2a2449adec297c17d1ec80cfa16c0a66e9372af5fb45a925bf1e965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...