MAL-2025-140338 Malicious code in callisto-koa-passport-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0618017da8555c11693d63a92fb08bd79ee8b5a12fa2199727a8fbca59b2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146152 Malicious code in phoebe-gravity-pegasus-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d986962622d6e31c6fc296c05851bff7c88a99756365beddbc2485d7ce2d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147978 Malicious code in sirius-spawn-chromedriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146416 Malicious code in postcss-magellan-ursa-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce8458ed2741ec54d9c40e4518395ab915bd46356a551b9e18b8511ef6e3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146384 Malicious code in postcss-concurrently-envconfig-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e04e6462042da26683766384914ce2a6a0464efca9a60545199159d9f870339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142565 Malicious code in forever-configstore-markdownlint-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9deb2f56cf0ee4b3e376a18166ca56a9018309a961160ec32f622f8bc6b661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140803 Malicious code in cli-magellan-farout-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b527d8b5b28588d0d184165346d2df487d983e0a39decd2a1b463d5211ca4e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144384 Malicious code in library-prettier-plugin-markdown-alphard-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc7128ddccd3f81a83c4a91ce2bfe6370036f9430a0229bb9548409a2beeb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143037 Malicious code in gridsome-dependencies-hugo-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cb118dfb512914757607f2581b601773b46370aa44eedf0fd97b506eeb430c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143549 Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401c0c0ca553872fa48d5cbb6954f3314f7e977b5dd6ee50218468026d0d7581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144994 Malicious code in mini-css-extract-plugin-sedna-fetch-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0f3136cddaf05ac4a7fdc9bc9a237997fd35ac94b4b82011b8d0573fd9cd80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142085 Malicious code in envconfig-relay-request-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47db78c95ae987d173aa06cd11ad9777df685935d01b883b22c230b76637f93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147369 Malicious code in rest-ursa-chalk-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa48b21337ae065011cc4a71ebeee38451dbc5d83d5039acf8de668c616f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147236 Malicious code in release-it-tailwindcss-pyxis-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c7fb83cb976f0a3f94a4a1e3c7d374d787061d36463088b0c416549d24f944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146926 Malicious code in quark-html-webpack-plugin-farout-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8601e78b8d2dfed9130bd47aa2752133e6926bb319210973f17abba74f8c4aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142984 Malicious code in got-release-it-nodemon-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2424016c8ee5e47eacbc475dc2f28d025a81a82cbae0be1a60689f3d65c1ba49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148005 Malicious code in slidev-html-webpack-plugin-mini-css-extract-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6672598e61c9d5fd59be4ebda8727f3849f31fa496dd2534bfc3f58f5578d685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142007 Malicious code in eleventy-nightwatch-betelgeuse-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7320bdb07066e0a567dc2a7383e4ee563738cbdd9f7bb0127ee6f78f232f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147989 Malicious code in slides-loopback-remark-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e43754ce3218fa51102acb6493bd334554e196c1386c6d59eef679f5f45b7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...