MAL-2025-142588 Malicious code in fork-foundation-enceladus-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f8401d11f4b6874b1999bdf3f2ec8220a510a0e127d7d11a1535ebc1f3395e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144458 Malicious code in lint-staged-gridsome-less-loader-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a7c959df4560a355bfcd68e15080007566b2e99e74162477598c165db3994c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142136 Malicious code in equinox-spectron-less-loader-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6c1f15bfa8b9ceed404f696d7d67708cc87536091aebab7814c7dfc538e968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142289 Malicious code in europa-query-tailwindcss-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf8315d71d14633947bda1a4296c713fe4b4f134f7524fed9bc803b047eb4c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143034 Malicious code in gridsome-barnard-express-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cd748aa1b25e39fe6b6bc97cc6b2c88f522072dd2fe72c0de2ed22d74d7acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148402 Malicious code in supervisor-semantic-release-vortex-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6100947e9d3906df533eeb01f8f6999202033b601f432aea1b8763b8a6e819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141523 Malicious code in delphinus-leda-polaris-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6c18328bd4bdbf2c3bc3fc6cd547b636261ffdd43a67ce494a8b2953a26355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147838 Malicious code in semantic-release-umbriel-enif-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bb1f785eb64e0a40223521ed9ed051193125258100917655fcbadf2b3985bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143003 Malicious code in graphql-gatsby-aquarius-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14047635487fb6f2384b47629b34b22e9f878ee9d1fa29e1f9ddda750bf3122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147496 Malicious code in rollup-ganymede-impulse-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4e423e4a8baa3cfbbd0fa2de90cc13372b6f2fee6ef4a79521af5809045b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139679 Malicious code in auriga-install-express-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec57c878f1c91a3125ce5d22ce4ca93c160d03d8b9c78e896caf971f7b8fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144328 Malicious code in less-loader-quantum-miranda-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f72622ee9f60adeb5f780beefca8e1efd2fb397f3f46dc1ae0ab8ef0a1b15de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147619 Malicious code in sagitta-soap-jabbah-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce1eac91ce5b3dd1ba6b6ad4dc0e56d557a5b7264db95f7ee63c57767b13c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149244 Malicious code in vulcan-lyra-cassini-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be04eb363e087f81ffeeb3da0960053b654d947ebcd091091b9064bbffbfaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141581 Malicious code in dependencies-rimraf-local-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054b2d956edf01f7319f62c077101349cd5044afb5c88bc418ae0072e0c3a095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140516 Malicious code in celeste-ophiuchus-norma-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df564ee22102eb66a10cb47c082bc4a59c44d5c2afa313ff9093ee101ff0ae14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142625 Malicious code in fornax-hermes-soap-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d020f29de3afe6cb948bf0aaf77863bd0e8e830591087dadf33cfbb7f2c86de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149679 Malicious code in xenos-gridsome-start-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b803824790abb3a2c7df66fb5fc2f1b0dac8a77b5bdee59ede4cc7b02092a0ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145662 Malicious code in nova-nebula-centauri-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7520c5cd83a0689a556b5e49fa9a4cdeb636b6faed4591bacc123fe16efda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141649 Malicious code in dione-sails-quantum-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db51de8b02e4365c3c2f3c22204587df64fb6bbeaf96792762351d9a753d3f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...