MAL-2025-148458 Malicious code in taurus-antares-child-process-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe0fc485095fad750a070495da9a88aa78c72c33bcffa9c5000b8fd69e760da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146694 Malicious code in protractor-pipe-puppeteer-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1520db9615b2fc63260e5f7cfb5985768b9d26e4cfd00e1879c4fa2ce22d6bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146026 Malicious code in pegasus-envconfig-wasat-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb3c8a932b15d91dfb13038e031e46cecbe14cba78be0527c74a12a035d982c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142112 Malicious code in epimetheus-uglify-js-figures-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba4c6c38b08a1edcc6330d629aab361871c08e39409c9f9c85f472c1eb1503f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140742 Malicious code in charon-yildun-io-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d69188dbff2a3d9d5fda5e3ec66c33f9b5431c4a8271d1fb7ccb64cbe4bd7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146558 Malicious code in process-mysql-cosmiconfig-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4955cb99431235505cbe59ed6497b1d38a001b5e13cc6d6dffea67900dd399d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143846 Malicious code in jasmine-bulma-janus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378d5568b728345b170c22d3c4ce9c4d7d79cd2eef452efe9948ea118b875b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146983 Malicious code in query-webdriver-manager-writable-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912021368ecb1501d6500bc85aa33d7f26dd016c69d92182789f990c2a475792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143532 Malicious code in ignite-xenos-uglify-js-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6b28600d0a5b6fc572d1b0eb6ef55abcfaeae911378facaaa2446d3aafea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146125 Malicious code in perseus-yakutsk-frontend-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a641fbc17006d8fdb7b548a76d3ebf7bfb0f5cc7aafc94582bd05a5f53074e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145953 Malicious code in parcel-carpo-cypress-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51611f11cebf50b4cdacfccdd2e1979e08f8252c810d6cd9c4f167da72720ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144321 Malicious code in less-loader-hercules-phoenix-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2202e59bc8b6eb663179fec4b52bcb54fe06b2a33c3a4cf3344a08f559886c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141572 Malicious code in dependencies-lacerta-hermes-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c3892029c1b658f28fa5b4cc927adeb359d890e770612dd77011a83b270f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144428 Malicious code in link-umbra-spectron-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536e47fdfce250fe64bd38d1a246f1fe8af603ae7131fd0af3df43f6ca78d261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149731 Malicious code in xml-non-blocking-unuk-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e7113be6e992e7cadba902c6cb009590caa63d99ea689540e7367b1cc72c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147425 Malicious code in reveal-md-query-gemini-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca14348c26ccfabf91c669c1372240b7bca296b2bdd6003bdcdffc57a236249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140488 Malicious code in castor-markdownlint-semantic-ui-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55243df6cf5da78f44239d0393b545ff1f217d0bae570f37a760ea7516868f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145571 Malicious code in nodejs-miranda-socketio-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec621e6726eab4c97228945d899750c0f1ad4ebfd72f119c1b2c51100b87228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149174 Malicious code in virgo-xerxes-pegasus-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69951ea3063a19a4b6fdf535ce96895993a9bbc7b93ad9729bec801aa77fc0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148157 Malicious code in spica-convict-got-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261b1cb8052913262bc8815e670f43ee36c2614297a654421d573ac65aecfe7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...