MAL-2025-142542 Malicious code in fomalhaut-hapi-request-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b83d9c52a3386540d37e1f636948550125af085dabde837a891176c91a9778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144100 Malicious code in karma-deneb-eslint-plugin-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca28c4630f7069c8ff7f629c225a8554f422bf681c109a76cdbaabb1cc4edb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139870 Malicious code in babel-playwright-luna-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386e381d89b1d096d764b416362ba70740124f35f6bd65f19f671ca6656b8881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145148 Malicious code in mongoose-atlas-levels-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fb6bc778d4b295bde9df5c3d51a08e2baba693ed694c8fc7eefd6b5812f805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146627 Malicious code in procyon-xanadu-carina-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6470c43bd30eb473cf516e28c2579ba27275297d6db3414d57ef6451ac3fbe11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140711 Malicious code in chariklo-rimraf-markdown-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8188880b724dfab1146bffc49114e329ee0a92d4ae9911e590dec3f53e07ed7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139931 Malicious code in bellatrix-cosmiconfig-axios-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a04c21a6b3d09e342cff07e11c6ee102c77d1794b9495cf445dca7e2054fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146253 Malicious code in pino-spica-leda-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8cecac1c1179d9823b5417fb59873c0562de62cc50e700c3015893a3f59ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140965 Malicious code in commitlint-config-angular-jest-update-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67ae4ba726fd3e6e3db7749730a7d56351d54d32d08a77f9a7d6ee31dae1d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140008 Malicious code in betelgeuse-spica-figures-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3acdf5fc9f9d033c6c7d517e33b6ad029d2ed749734530d1b07dd7e485c2871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146666 Malicious code in prompts-jest-regulus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca80092c7cd6b3d5f94d680744ba4a6b93e34787a821b83e7bb8c2bd7dea6013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148713 Malicious code in toml-indus-ophiuchus-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35ea8acf5976aa0e1a6874e5cb1be341370e4a0bfff026b46f2eb969561d40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141193 Malicious code in cosmiconfig-prettier-plugin-markdown-yonder-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e91001c644db002183bc0aa1ace65a08d0aeedd08ade3f1f02ec3174c2c80f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148081 Malicious code in solis-phoenix-webdriver-mocha-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06ce9b19aa2f814732c2db3e30a62e1906e3bd92c351ecc86a6005a74160534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146405 Malicious code in postcss-loader-pegasus-registry-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da724633e0b2627cc47e764d76ffc267a948d6191d9f6aa6ee8f491a9fc1e9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143005 Malicious code in graphql-loop-module-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86ea94a77cb0553e830c53e35a9681d968d5df4e3cb1286d1736152b291533c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146061 Malicious code in pegasus-upgrade-gravity-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66715409b059a0c688b80772af4ac8b0e473a8d2d8a8d25d96b2b1236cd73425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146246 Malicious code in pino-pretty-winston-json-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d7ced402c9f3523ed686f438c023726ebfd93a97fbcf9f8146d5a2d75988d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67a523c8300a06ad1b671247a199d7007231d224f410652f4ef2fd53da260af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive-sapphire-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8705622d2e95c427d985ce2f0095e7f02ba8db307ea6fd6f933ffefc6b1dcbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...