MAL-2025-140690 Malicious code in changelog-upgrade-native-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985c3ae2349fb80095178ca8c1c3d0e0171ce3f14382f0bb8265bbfd705918e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146394 Malicious code in postcss-loader-europa-webdriver-mocha-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420b2d238f8b63539924380a7ae973c5a1f00146ed74ba4166c0ec6b1e96e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148449 Malicious code in tailwindcss-oberon-fusion-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 232e75b055fc6230a800b89b059a9525beee5af58139c6d0f9ac05f8229b7a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142325 Malicious code in event-spica-gridsome-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f0c6290eac850e1d6c4cb0fc81023c3fbee17e9f5b5395d1c16f9dc4ec4e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145418 Malicious code in nextjs-mdx-auriga-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8c8af77a53c752e008d04598c3a743e029cb6de2fbfc1fddf4e8fab527da81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142422 Malicious code in farout-redis-levels-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4808d63fabbd9b447cdda5786ef87da4c11c3ccfba1d820b6fa9165fdd0c9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144326 Malicious code in less-loader-pino-dotenv-safe-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af76f40a9ef37626c42f5c3ea2f4de40317e8fd209c2822c63c0123bdf79ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-nodejs-spinner-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b665158c37110255c5be34bbe5ad2da8289d225777f4daeed830c7f915a5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145451 Malicious code in nightmare-ursa-non-blocking-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed89bfdd8b3aa3d1c2842ac2f5b9491ba021c343e251df6144e233f0bee20006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145371 Malicious code in neptune-passport-venus-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b79af312699923fb557ac1f93a7acb0b38786ee080279ce5cb81d33f1d1e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144475 Malicious code in lint-winston-browserify-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f6d475b0ea7203ceb3c07f5ffa5db59ffbef110b3585646afc0d02eb097dd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143218 Malicious code in heka-scorpius-module-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40cfe8bdca0d340d1f0b472bc30366a76ea92e2065b9d2174337175dadb2f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147211 Malicious code in relay-virgo-native-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bbf0b82d1adc23a5064292078fd7c51cefe3f55c09e41f8da9d5714ed67dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141424 Malicious code in cz-conventional-changelog-markdown-metalsmith-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9482e36bbe4901e1af6bb14db59f11eac88fd2d639fb758299a6a41f7db6f35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148064 Malicious code in socketio-sedna-centauri-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bf5c1589ac18e2c3471d0274bbd2f7da00cb75993fd0a325f908768672968c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144962 Malicious code in middleware-nashira-install-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cd71edaa7716a45fc85c9b6f363644f060686a5f3861bae46460cab85fc19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144803 Malicious code in meissa-europa-forever-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8907b0323156f50189214fc22cd49f2c00cbbef7df9bf25c4388076a13ddb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144693 Malicious code in markdown-pdf-mdx-eclipse-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a747424ae8e5b12c9bcae09e5d8848665d283990b419b4387e97311c63169be1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149631 Malicious code in xanthus-middleware-sadr-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09af82f20b7a6de853595819e0521d588df0f7565fbf974821cc4b6309e5b000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140008 Malicious code in betelgeuse-spica-figures-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3acdf5fc9f9d033c6c7d517e33b6ad029d2ed749734530d1b07dd7e485c2871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...