MAL-2025-139479 Malicious code in apex-hexo-europa-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd7bc5dbb9a1d741f30b28b3cd2103c6bced884dfafdcc0742d630ed55e169b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144702 Malicious code in markdown-pdf-passport-webdriverio-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30cf25fea46387169a2ddaa6718fe8741c9040928feaa0d19f700989e189e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144302 Malicious code in leda-xenos-redis-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5542332365314a057adce06d0c70707b7b5d7e0a586fbf19dab58a88701226f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144938 Malicious code in meteor-standard-xerxes-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f7a05cf55a3f259e19fd2c4fafa2fc5bf3d5d7d3bfc1d8abf65fc3790d2bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144770 Malicious code in mdx-miranda-apollo-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7684b2c1caccbc41129dd131debd88ef627e42a25ac781346f8d69986211f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144538 Malicious code in loop-xenos-config-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572238a84327d4cc87f954bf26a61102ae7406d29afd2f45bea34c346d2ecdb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140283 Malicious code in cache-semantic-release-uninstall-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9671bd2f3945f38791b47b7050c3c40a72bdf1f1d31cced49bd57b82fc1f5119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142086 Malicious code in envconfig-sagitta-procyon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf67b16f212ba924c7631f97f60e80217eff08f2b58584d029b03c21095a338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146069 Malicious code in perseus-blaze-ganymede-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c36548131bc59eca950e04d1b40f3421ac426a7189a8aa205124a8688d65eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147054 Malicious code in react-bootstrap-docusaurus-release-it-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0995fe21961efede9dd77ca581d5867b77e1a82321014f9343117b49c54685e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142070 Malicious code in envconfig-bootstrap-uglify-js-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd4098356c8ae408716b081b72671e5e811c3ef40bc851d469ae14849c5741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147049 Malicious code in rate-limiter-unuk-less-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f48b7e98a995af2a7a375936cb22752167fb03fc6ad0f8b998f41e42e5bf500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142810 Malicious code in ganymede-mocha-colors-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d2e4560974c6e97509a5cc24fa70ae6c81ca4d820ffda5d7c4ca31d2a52876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147614 Malicious code in sagitta-quito-norma-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee947f96603b2eccd772524f01f17bc2300762074cbc270bc6b8bfb89dd1cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140206 Malicious code in bulma-buffer-janus-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0f08c3a930aeaa2791a6f3328a697c86418626b8bbd14a9dee9627b5ba1669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142329 Malicious code in event-transform-apex-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8329d07d153602e53d39e6ab9792a42a05d33fe8f6d9b74237d2d37676bac1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149122 Malicious code in venus-sails-betelgeuse-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab7dd16388a93e8047078995ecb25ef16b1db8fece43c462fef99199b710136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142233 Malicious code in eslint-plugin-ignite-carina-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d58af40063be0cd212eab0096cb411052d426f2505714f8cdd21598a657b746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141925 Malicious code in electron-pegasus-perseus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671af7da2ae010d3996821b6cebc6aeeebef5043d6a5c62b3fe0d51ba287aa07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142830 Malicious code in gatsby-antares-metalsmith-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0608261a0fe9f89fd63b28a2f5ae4ea7d0bda75b02105c40feee677bf54f4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...