MAL-2025-145135 Malicious code in mongodb-package-quark-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2433cd3eda073404bf454198249643027b162078660869a5305671860e0abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142037 Malicious code in enceladus-stream-chai-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a963320fc9701dd9f33123eca2220399517e38a891994d0bbc0ab226aabcf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145148 Malicious code in mongoose-atlas-levels-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fb6bc778d4b295bde9df5c3d51a08e2baba693ed694c8fc7eefd6b5812f805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149763 Malicious code in yakutsk-config-mutation-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e87fd837a3fdcb7f7a0cd9c466ce5b1a6a242da406d99ac0541734d5c18e73a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145205 Malicious code in mui-nebula-gemini-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0997b9321571e9cd41dfbf04b6b87f0ca2550c498b2cd413ea4b5f0355f24d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142041 Malicious code in enceladus-vuetify-foundation-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72476d2b806b3687d1fa43ef3713ada1a16d869cb5a1f91e4df2ed45c57b6dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148731 Malicious code in tool-command-geckodriver-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d4c1dfd04a531ec9f0f8abdf611775cc1f6fb6b997f973bad24c056990bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-cluster-chalk-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68d6adcdba26daeeb1c108de5db41a2f44f387d2a858d78207f3204892fc6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-ariel-sirius-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0e61ae6839d445fb388ec17f3094ac1fd74c68c9d057251528b87749bff4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141224 Malicious code in cressida-bootstrap-draco-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4026d3b059ea83042ac7c4e417f310271161680afdec2181530d17ebbd4f8825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141833 Malicious code in dynamo-optimize-css-assets-webpack-plugin-postcss-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83144d9b206c28bc214f1e496ade2f1cdd50ebd1fe16a324124bd89653ef1118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147085 Malicious code in readable-mysql-bulma-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9bb86e7220b09538173da39233d63cd3d365b9505e813cf551d22f7c309caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141072 Malicious code in convict-enceladus-docusaurus-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32a8b621e280e6ae91766209b9334a5f2c7e13d65c8e87032acf79b65bdbbab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143564 Malicious code in indus-fork-rimraf-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa831a89833772caceac7a6c6708f1dc1efc4af5b76d2e7f5c29c49b52d87fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146488 Malicious code in prettier-plugin-markdown-miranda-firebase-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331c4c89f4f2e753d5a57fadecfece35c8c7ebbf0f40364c1598ac968cb67f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149209 Malicious code in vuetify-fork-xml-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683777ffb6a0d2d4ffc0e742ec2bbcc49d9709fcb03df1612896d9e53e07165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147106 Malicious code in redis-javascript-ursa-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632fdfc98f99f4489d51e6e6135e59ab223c5580a887f025165a80e41f743e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145888 Malicious code in ora-kastra-fomalhaut-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68eef0a934d73d0ead1f154332245499d61fc033a2baefceef76b244aca28fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147055 Malicious code in react-bootstrap-draco-nuxtjs-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503cfd33203eb61bea2f55c0cc50a030ca1af9d5506549c886acb9edbd9776af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145666 Malicious code in nova-reveal-md-equinox-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f77ba08f169f2e423eaa7961c5975b6287c4f39ab74efbe97dba7ff08dd69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...