MAL-2025-141531 Malicious code in delphinus-transform-event-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0752736ff183a84118d0c03070f6e93fb04f2b02c74e99d9c655488c1f9a590e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146459 Malicious code in prettier-callback-docusaurus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8670eb51790e74da0f18c792f45784b13105db35ced17fa5567b4d0730ee2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141364 Malicious code in cygnus-cache-magellan-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139619 Malicious code in astro-vortex-commitlint-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832fab4734976965417e4c3c3987afcc42a99c3cf032927a927552d6606651c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140242 Malicious code in bunyan-gridsome-init-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e117de56da81c5c34a98930ad169862d0bb5f3bee646ae6e54accefaaf814f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139837 Malicious code in axios-protractor-loglevel-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d16a7033d42bdb4fbfafe22f856e5fb27e0364dea6cc4a01772b651a18961d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143382 Malicious code in hugo-chariklo-oauth-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fd7d1fd0275b32a4d80f5e3b726a6742963052cd0743ae6a7dc530322ef608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144915 Malicious code in meteor-iota-ophiuchus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b0ff1cdf2157479d762189676161efb8616723cf3c47dcda0abc29af08734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141814 Malicious code in duplex-link-test-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d73d968a6c8dcefba38eae6fa12e0576d000367bebc2b6d119b6fd9765b76f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142358 Malicious code in exec-phoenix-miranda-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2842808b820c37812483699f3b3fff8758c6e575559f4695d4506bbe93b9f825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147098 Malicious code in redis-eleventy-eslint-plugin-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64593aa2f22548ad3c6bc1af3028c102ec42659a9ca45334c21087472cc2150b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139704 Malicious code in aurora-perseus-publish-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1914b6c4e9180f53b91bad06b1b25379fef2eb403398388b7a0665a9004acae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144135 Malicious code in kastra-version-sagitta-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3ad7629526512c8e8094dc1e6a642a0a45b7f8f0b9d35bcec3a523d57cc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148674 Malicious code in titan-chai-heka-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e8f2fed5c2b90a4dc02ed95b7779ca58c2be25e2092df0e018b44bce9f349b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146852 Malicious code in puppeteer-equinox-polaris-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f13932f9a8e3539f087bc416ba6f2dba7f3d6ed4e3551db43cf729c76f2caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-dotenv-safe-kinetic-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142461 Malicious code in fetch-virgo-pegasus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148102 Malicious code in spawn-mensa-nestjs-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4b5e325e2cfac082460dc57cfc4b2006f296c9dd1b3b9c7ab233de8f93398a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148904 Malicious code in ultra-playwright-flare-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc6a1c7c442c53b194a331d867177d214e9c376b7f6a3f4abcfc5130d46dba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...