MAL-2025-139961 Malicious code in bellatrix-upgrade-janus-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af42ba641fb995fa9c020ea3091b0a83eb23c4da82f4514246b7213bba84c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-quito-middleware-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475f449d7bd5dce4851ae837b64f10777414bd115d80a9416776f5418ac55b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-semantic-release-atlas-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d18dc8dcc795d30bc08edaf90ad56deb686efefb24e1006e8391463234d5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141886 Malicious code in elara-perseus-xo-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06bc6e93d26daf13d4509743aa81aedf7d2cc77c9a7522f0242c46ebd25bbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146497 Malicious code in prettier-plugin-markdown-uninstall-jupiter-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016a965ba834659af21a9a6e5d253b93b8c12b8879febe52cc900dcf8c2a290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140462 Malicious code in cassini-cors-postgres-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb80e0079a5ac1d92ba0fc8b0ff143c34a6cc8cd0cb0106ce662a719d2abf5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149543 Malicious code in wolf-comet-dotenv-safe-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba749e3d74862f13eaabb12c70193eeac434a7647c0bae4281bc4536eaacc4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148139 Malicious code in spectron-webdriver-reveal-md-enif-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370180c2f129f15a2de150851321c58aca4d76bfa479fa7d138492a2d75d83fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141012 Malicious code in concurrently-rollup-plugin-pino-pretty-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fe62b6fcf916ddbab500c08a99898ec65b9eb1a259f6363bd0e30f51ffaf86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143905 Malicious code in jekyll-framework-meteor-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4453993e9e542910feb59b22993715eb92750b637596b75e30f94b7f65d1520d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141875 Malicious code in elara-fornax-pegasus-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e40397d6cb0a62aefbbc39af3c9a1df77c5115ecebbad123ef705f0fcadaa15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143229 Malicious code in helios-css-loader-kastra-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633c687aa376abebf8cfe06e2dc3aaa0c30eb2065e0fdf8373b6e67332e7882b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-antd-venus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cdf93349111eb5fb097432eab96ad486bd16e7b12600203a2e5c3fb9b07aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-concurrently-css-minimizer-webpack-plugin-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4e5cc17b6921b4f1627fafef4b139df5cac2b0f07cd37d26c90b68ab19bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-version-mini-css-extract-plugin-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e3535c552ac62bb6f7fd42e81af5b0e1f6a4b00c9cd58eb684860eb9003e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139491 Malicious code in apollo-aldebaran-restart-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893241e83b6fd5a4f738fc6b44ea569387afce0d3bbc1b8c8ad14df1411415b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140607 Malicious code in chai-virgo-spica-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89f745f535148fb9dba116bf9fff2d297aea6b16488115eae1578780426684e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141658 Malicious code in docusaurus-cressida-vuetify-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d307e1b33fa1f7f77aae72aa9f324c6b1a79457a5786e8ff424ea0338bf9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142471 Malicious code in figures-ignite-typeorm-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba65ca8d3db100e2561aed3aa94db75191efee78aa8dc130f06a757666bd98d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143022 Malicious code in gravity-csrf-shelljs-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341f7f2f7872be0850775e6d8315dcf63081cbcf5cc095b0af5b05bd2ef6ad8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...