MAL-2025-149822 Malicious code in yildun-rehype-javascript-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7450993f2ee006c4a6d5bd8bc981fba7295d59c3471a8aabaecaeb1fe49589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140900 Malicious code in command-elektra-writable-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 444eb6f58e2b31a80a7f2384e1894fea97a4fd4d95cfd71d677a69cdf909af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149110 Malicious code in venus-exec-sagitta-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5652eb806bf9840e686042adc13f54c667dff2f510804fbdd19f2eaa4763379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140929 Malicious code in commitizen-dotenv-safe-tool-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a398c58fa355d8d568dce0775167b9257cb7d5de6497c9866d0ff2b45e2259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-europa-json-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649df122b61a0fefdc081c4cf8993203d642edd844cd95389b1a9160d88043ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147051 Malicious code in react-bootstrap-auth0-quito-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f145c79ceec32c65c847140e686b61ce1700a24f7fee1a9f134747f3216bf8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-quark-neptune-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c811550bc2be66da51f40555935159a4e2d2f3d2d3de74ee4df0bbed13cd079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142267 Malicious code in europa-foundation-zephyr-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8d631ffda776367c301196c5654464932ee480035772ee93d2291150ea32cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139309 Malicious code in algol-semantic-release-umbriel-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e08dfaf5755158a631fad64ba2d043d77d0d37c5477fc005c7b66578499f9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148070 Malicious code in solis-buffer-vuetify-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bc61d79c4df1c3d7fe17bdd02867a909c192bd0655151e889038bc3d9d9ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149396 Malicious code in webpack-eridanus-iota-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65aa2b88d2e7d66ee39513bfc1364e086fda5473dc9a5bdf8acb712cfd322ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148885 Malicious code in uglify-js-upgrade-scorpius-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a619ce4025267f0cd25ec403515e25fd7c994673f76fb3a0cbac6469abc6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139317 Malicious code in alphard-auth0-webdriverio-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6859770119a4e78a30f5f48c4be3a5d007b88f48d81094e3471b635972c0f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139517 Malicious code in apollo-jasmine-pegasus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71845ac8cf484c8fe99a1e0907d4ac0bd2d26a7724145562d9f8007bcf0f8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-start-cressida-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ca4703dc3febe62df4f9224f16a6175999979d6c1e4ff155e28b2a5b32e3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-quantum-style-loader-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179bc24cc0846febdd1660ef9caea52e3cd7cc38814851bd94acfd20e3ed0568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147447 Malicious code in rimraf-concurrently-release-it-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a3d550574f8a05abf6d282d8cf72319f5b6ce6dfd100ffbf7cb35777ee8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145088 Malicious code in mocha-nightwatch-yildun-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6889601924e6738e9d197d5c09de3440eda1569d4c41f88d23c7182daf80ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148216 Malicious code in spinner-weywot-pegasus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6eff7a0d03bdc73a763774092380a479e5d19d89399b9e1657182baf5b718c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139451 Malicious code in antares-xerxes-elektra-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d475342fd46e1b5411c65070ae1c4bddd5372c66609e943409a0f8c8c40477b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...