MAL-2025-141038 Malicious code in config-resolvers-dynamo-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981013e08c2c2656982eba39c24a607f14c7f67157fb5ef4d1a7ce1187eeeda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141072 Malicious code in convict-enceladus-docusaurus-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32a8b621e280e6ae91766209b9334a5f2c7e13d65c8e87032acf79b65bdbbab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142041 Malicious code in enceladus-vuetify-foundation-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72476d2b806b3687d1fa43ef3713ada1a16d869cb5a1f91e4df2ed45c57b6dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143954 Malicious code in jovian-mocha-postgres-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933b00c6a74f6d2bd88e6379856703cfbbd465278b276af4693ce443f13ac429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147019 Malicious code in radiant-polaris-oberon-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 188ff9e547ea0ecb40f0ea8761f723c0a4684267863535030583b7c5858e241a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149232 Malicious code in vulcan-exec-foundation-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393418d75ebc2f776c24e86203957211190acf17666ab3c9cfeea66c745b963f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143905 Malicious code in jekyll-framework-meteor-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4453993e9e542910feb59b22993715eb92750b637596b75e30f94b7f65d1520d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146864 Malicious code in puppeteer-sequelize-link-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d360f07a2225871e32929218ff89e68144d850e41759c5c8675232cd34d9e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146063 Malicious code in pegasus-vulcan-framework-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49c20d826fc3caba360e82a06dd11069ea8cb60d4ffcfa801f351b1e7f5717c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141523 Malicious code in delphinus-leda-polaris-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6c18328bd4bdbf2c3bc3fc6cd547b636261ffdd43a67ce494a8b2953a26355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146686 Malicious code in protractor-gridsome-levels-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da0a55e3c7d60b91f3bf11a33482c6cf3f299f5b9285ece091b50d6d1699e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143047 Malicious code in gridsome-oauth-bulma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07451b678a3fdfbd18a8d0021a392029d22dd35b437bdc15c8d3c07a3555463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143186 Malicious code in hapi-jovian-hugo-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c6f6096489737ed111c3532cb37fcda467209476821719e723cde5cead77cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141707 Malicious code in dotenv-enif-carina-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6246769778c7fcba8c511e8df6a134d3b68f727a2080940cc9609ecaa912b2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140146 Malicious code in browserify-winston-yaml-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d1d5177935693defaa858303568bb9b915d0de3db14a9ae01287160689c3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147617 Malicious code in sagitta-sadr-taurus-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723df4b26e2738054b627a285a7cbbeb1598dce50f0dfc002afa5a0d00f5358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140084 Malicious code in bootes-nebula-cordelia-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fd084dd542b21def1987eedf23c9ecc771d99ce6b923f8b0c800a2d77ac8d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141173 Malicious code in cosmiconfig-await-cressida-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd2568a507aef1951ff5eedd43bdd5b0ec74acef3c09457d804ff29fed8d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143782 Malicious code in jabbah-loop-corvus-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d56eafd05e6c679c487885f25fbaf0ce07c2a85970d27f3e50365e0dc846a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147085 Malicious code in readable-mysql-bulma-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9bb86e7220b09538173da39233d63cd3d365b9505e813cf551d22f7c309caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...