MAL-2025-147122 Malicious code in registry-csv-corvus-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8533a9b1ca45fd27e66682a0d0a0ab2095d395ab5a7b5b0e0ec55e3c98200d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147685 Malicious code in sass-loader-xml-altair-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602f04ec56ac19f9194b5ede251f2d95df2f758e975cc2eb78ff7be59af51050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147105 Malicious code in redis-izar-react-bootstrap-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6cef921bda83e71f83929fb9be55ab26d6215bfeb47a5eb031441652b002d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146126 Malicious code in phenomic-ceres-uninstall-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e46df6ac51c8d7445b7bd05abfc596bad25b952eaa26ab0106c78d1ab1f3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143021 Malicious code in gravity-chariklo-library-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760633396d9626e1446ca9c941b2341fd8bf903b955e6bd238487ca4d258e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148399 Malicious code in supervisor-pm2-phoebe-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5149d22e1e90da59bfbf90b2942e07d4d2189b45634af8923084ab8304f538b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139819 Malicious code in axios-blaze-electron-builder-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435766bba1d220eea1948c3caaa83c02a3226900dd278834f7fce9a081c91a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148023 Malicious code in soap-hyperion-juno-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbf8b288371f848df71ed44fa48d183d53ae0aee3876e71ff53088e635592f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147368 Malicious code in rest-tailwindcss-hyperion-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e22a4a72ba894fba6775542bbfed8bdd8794b17d73198abd401b0c381988505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144510 Malicious code in loglevel-indus-spawn-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85272ac281207d7c7494db22e4c56f02c6bb68825a7a84e3102b6e690bc035a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145195 Malicious code in mui-betelgeuse-chariklo-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300f12d26957e00101409aa7e0c2cfb856fd8a82c85b7b2a264cd249f286106c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141045 Malicious code in configstore-apollo-mira-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f886345bbcfc473d8d3b4a18ff79cbd8439b3bac331f5bdacfb2166336a495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148097 Malicious code in spawn-gemini-mongoose-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538449fd0956eee408cef5ac551636c4e3e51f952b988445fc27d61f1cf38fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147075 Malicious code in react-bootstrap-socketio-nestjs-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592138fd44852686e120f16bbef78210aec4400631292160c14d54c5156ef1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147264 Malicious code in repository-dotenv-safe-xanthus-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57975ca82a0703ba75f441ffa6b0399f3aa145383caba60cdab563bbf3341e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142240 Malicious code in eslint-plugin-request-indus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ef0d07a987d27e4c659a7944026bc057f89b21342a892da7330296ce732087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146191 Malicious code in phoebe-zephyr-repository-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98e541e015a38ec9832fabaa861f89448f7b5bb4e07b64cfc9906aee09eacc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149081 Malicious code in ursa-xerxes-betelgeuse-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486ffdc34eb6aee276dd8cb1becca10cf998b6e3f73a94f7fde812b72734c913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144928 Malicious code in meteor-readable-dactyl-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94388570f96da505278819c6e146b9c7c3d8e2e1288e526202fbeaf4fb4fec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...