MAL-2025-139395 Malicious code in antares-castor-yonder-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d988bdba1d2463dac031e9b4361d5cf5f8e29905aa4c542b324e6cfe05c62bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148434 Malicious code in sync-telesto-configstore-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54779bbcb4eec02fabbaa36234e8bc29bb9dcc9fb6945cc112b983d94e6650c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139626 Malicious code in async-hugo-yaml-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c0e1b1c15e19a880c6cb5a4a289493b09db9ef6d668639e8e3419b0c1d2333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143254 Malicious code in helmet-miranda-halley-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89d6ca7cce0fd80ab186246ce104178ed46869da529802ed81183e32b0ab323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149139 Malicious code in version-loopback-ursa-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d635077354e4b6681fd7f7c304bac7987a4a3995a35a4d7339642ed6f74a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142818 Malicious code in ganymede-regulus-nova-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfcac39e2252d7a98dfd7aba9713cfe91f64f7993e4b430534ff58eade376655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145713 Malicious code in nuxtjs-release-it-reveal-md-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9509e3bf3c60fc0c4f421aaa2b37563dbf7315de8d4cbea0def2c9ff216cbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148892 Malicious code in ultra-eslint-plugin-levels-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4c0e6023a4a0a627300221eeb5bbb3e70c0f49572a3e51aaf6d797bd0352d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148877 Malicious code in uglify-js-pegasus-proxima-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0f16606331574b494cba2d3bb53773f1cc5c2e3d2a7e3f0c08d9f8320b23b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140752 Malicious code in child-process-mini-css-extract-plugin-carina-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0600f861e5c7c831867f5d513940f33a86c60daf9f02ae87e935468a6bb3d6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141406 Malicious code in cypress-repository-rimraf-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120b754154b050cce9db7fc61ab5ceeebb7e8904a40f6acc9e1bddec0640021a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139465 Malicious code in antd-repository-nightwatch-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde768a62bd4e0456e3d2fc3c4821ad83196bda6f38a03574724730c1a7e44a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139453 Malicious code in antd-dagda-optimize-css-assets-webpack-plugin-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4904d6c2f02b50ea44fe5a7af9560547a704cbe0801ceb932c40c6207413bfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149228 Malicious code in vulcan-css-loader-command-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c75a1ddeac8182be8aefa40e93e61225edfd8a7eed0d9cebe0d2517f924b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139335 Malicious code in alphard-pino-quasar-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f746fb29e19796cc7ae57f5ab42bf57a701711ce4a6cdb0c6da4c876f9a77627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140471 Malicious code in cassini-native-blitz-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e9c1ddd23dbb7b4ae51e472bf7ef3b30980708e67a3f5144acea3514052e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141390 Malicious code in cypress-alphard-proxima-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb90a00a2e076e20237feffd9b33004ffc27b506f0d8a93d9100e5823fd1745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146912 Malicious code in quantum-polaris-antares-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0f015dbead58964886aa79878930e99d3d2029dc1b08424267e6f4cf6112f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139863 Malicious code in babel-iota-command-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4053b964c04b56158ec8a42e3d4cdfcdd483167161fd27455c1a449b7b31160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-lynx-ursa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef6b9e2958f19ca89796a67d8034d818d1ed8d5a1a1807f5eaa07c7468a92e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...