MAL-2025-142644 Malicious code in fornax-polaris-nodejs-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870b483c3e5dec4b59b012c59f411ded04b1a425d2ddc90c8f1879a41198ce5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145960 Malicious code in parcel-impulse-dotenv-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf6f1a2a1a9d838f6166968db292f3595c76fc758cfcc26f5beb1b31df51b951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149602 Malicious code in xanadu-mongodb-typeorm-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b3004b09815b865e7aba8cd396701e03e6857c8d9e9380be68a316412b075f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140722 Malicious code in charon-inquirer-bellatrix-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45ddb73e1ae89fa61983ff99b6536cb6dd6cf474fb310c407b8cad8b5533fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143364 Malicious code in html-webpack-plugin-hyperion-vulcan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b341a0c15bb2ca0e6a7ae84ac4e02681230227fc30a00d3a2f1af1c0d6f4f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142226 Malicious code in eslint-plugin-capella-pm2-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f01fce2cf112eff94e9c822221bd02535c7d92588588f9e2104cbbc4eae4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142388 Malicious code in express-non-blocking-radiant-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331e367c9a2ee4f71e42bdc54cee6f2118be46b3a3fd2235e2fbec1a7d33c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139901 Malicious code in barnard-andromeda-indus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304c748107942127c7c1d160a9a483e68ef0f9a68ac202f5da185715afdbcda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139506 Malicious code in apollo-dotenv-safe-adonis-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcde924ec26f252d60febaa53742a5d726f948b604dba32301d3f6607eeab559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143489 Malicious code in hyperion-morgan-start-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8a1f833731723eab33bb2157f6dd3737d4498b61a94a6d4279c80dd713bf0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149583 Malicious code in writable-uninstall-jasmine-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2f24b9e026d18b5c40231cb9e878cc9def41cb39e9edd29d8c490a7c51e973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143292 Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e418f0bc559469130812cf69c9e779b415806d81ade924d7975a5e386c1340a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142299 Malicious code in europa-webdriver-manager-jekyll-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a7da46a69a160a1fdd63a7030f032616fe4f7f020371a278975b7d6369a19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140418 Malicious code in carina-odin-loopback-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a9a886bb982839ebda50269955d0bf11faafd1668c2f4578ee66d69641b062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145362 Malicious code in neptune-fornax-miranda-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e546f80e3630052ab9e9536f8ee2827f28cb7a9bfcdf8362f0330a310ed9b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147849 Malicious code in semantic-ui-jupiter-celeste-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3f13d58c06befb22e193f9117b1df12449898bb2a695c46c907b21ca14bb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141877 Malicious code in elara-hermes-element-ui-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28265b9fdb68bcedd5c210e9a0e16a40251eadf6018250aea47df9be29877f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143973 Malicious code in json-figures-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f0f17392b56d80f72cd5d178af7fead25d375c34ebf71364de580a8bc05822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144708 Malicious code in markdown-pdf-sqlite-zephyr-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195291aa189c6bfdaa7f3956ee1401e30637c563743c36d71d9c6e0cd6aa28d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-galaxy-phenomic-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a4b1f7525377ddda748540c92b04a6389627106af25100a29519c83625274f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...