MAL-2025-146630 Malicious code in procyon-zephyr-gacrux-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b36dd182333e223a07c14e080a25615a128d34c5de792bd9756e21634425f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148551 Malicious code in terser-webpack-plugin-fork-dynamo-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 059022a5e2baae5c20ba4abb7e96dc0f745db65935cd63e383ee4ce4e3e868a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146247 Malicious code in pino-pretty-xerxes-rate-limiter-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f043826a25c7da3cdd55c99f153dec6113f5ea3f9ca3403c70b26604911cf129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149783 Malicious code in yaml-arcturus-postgres-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328014f3eea8432fccfec2d92b8ea016e420ef7d3d74b9c0b304d13eabee4d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148289 Malicious code in stop-chakra-ui-html-webpack-plugin-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a04beb1d94e9aa6142f6535b0c0dcc3320aaeb6a53e45353f3211d6f345730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141073 Malicious code in convict-fork-pyxis-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5812c5fca60d1dc97f84b0717487cf140262af29cecb3162e85e2553eadcf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142199 Malicious code in eslint-config-galaxy-postcss-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071d87b05998a03cb70ec6cb8b456a568c2d1826fa8723063940c54ca424a885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146554 Malicious code in process-install-rollup-plugin-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d53156fae37387a3d630d0ef0fa551919d0a384042b09cca6044d0c86ea7788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140383 Malicious code in capella-corvus-hercules-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ba9218bc3c2733479e1a980c4cbbbcce6b3519911cfd861340da2d6caf505d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144424 Malicious code in link-server-bootes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894d34465a3ec1ff7358819afc22b394d012d592dc9c83c9cefc484eaf0ddc10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141142 Malicious code in cors-vuetify-mensa-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67a4c307c8503a7fe4ecc0e69ea682388112af41d9e1aae223fc7ef001ce09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140876 Malicious code in comet-gacrux-pm2-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7729116efe483cf849c752a73e89d5216af77a6872c275da676077adbf09f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141158 Malicious code in corvus-loopback-yildun-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6529875bab3e3c2ea80662f8dd0237daf2d1c13aca1fa24ecbfe0e6a13e213d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141166 Malicious code in corvus-readable-cluster-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c703b164d6f08800f2448b0ab59f117eaa082c46ca937563ffc6be031c94526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147146 Malicious code in regulus-framework-chai-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dec6125e6eda21ae58cd523b9bcf05322c40958c07333127c5f29c35ea7baa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148294 Malicious code in stop-firebase-mira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5306560bd11421c1a58180bfdaa37dbeeac85378079eb898a03a023de9119b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146234 Malicious code in pino-pretty-hapi-solis-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c674bde158ddefba91c9d567868a8757a09867e88fbb79e9ec1e442218ce0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148553 Malicious code in terser-webpack-plugin-impulse-inquirer-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74331383fd71651f9cdb11492c213881425ef996a503ea374ee428fd199ffd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145816 Malicious code in ophiuchus-got-perseus-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db03ad94a523479b2eff4c7204a7b1a786f887f15f2a953ae986b77d962c4be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139475 Malicious code in apex-charon-bellatrix-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d45efaa2137362f3875d3d485c2cbe47b7af8b35490c7f6d3da3eecf4e1be69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...