MAL-2025-148531 Malicious code in terser-nestjs-deneb-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faed8ceafb424f803065b2bc376f7e367d1e2278d4c405f8cd241aee76e9dac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148900 Malicious code in ultra-less-bulma-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbe8e09124fc0caecfd47bbc91cb65955ecf81b13e15dc173f1d939c9e620e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143123 Malicious code in gulp-quito-typeorm-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d835e8e0d74ec55eb6e9aabcd80148a390649445d256ee27fa0fe751eb1619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149015 Malicious code in upgrade-helmet-zenith-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029323854f25d0b890fc15cdfed960fa871990c4eeb799297344b79d60c6b465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140939 Malicious code in commitizen-rimraf-figures-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66aae2714021dd118c8ba366f6b6870e5c1419b5ba2ac2523986e777b5c22445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140107 Malicious code in bootstrap-hugo-altair-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beac14029dddc28c5b4bbe056a0cbef77f3507b7b61076db87a723febc37e8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143516 Malicious code in ignite-jabbah-betelgeuse-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734c268affc6d7f5da7fa0680d589940b9d8422e85a7f8e6f351d7c12b52689a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146934 Malicious code in quark-process-schema-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaec4fe47aea0991145f9198831818cd8927acd7ff0779d6a8a4553a3b0018f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142163 Malicious code in eris-blaze-pegasus-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649ba8e5f1092cb16388028b23ead6b8f6e1199fda7ac9c199d2088db3c03feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141477 Malicious code in dagda-mini-css-extract-plugin-ophiuchus-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c013602c546a941cd797235368c91bf64594bd013390e347270c00560b5077f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141209 Malicious code in cosmos-metalsmith-lint-staged-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e47d9bb19bf1f40f361150bbbf6dac55e25b74451e6e9a059068e2409af1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148729 Malicious code in tool-bunyan-sagitta-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6652924b7c5dd4f3de7ca35faf7feb625b269bf18150aaa33440823825e8c9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142463 Malicious code in figures-comet-markdownlint-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b444d2ce3198df02332d69232f00a086f98bd5de52a8dcbae43404a3614a3a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148355 Malicious code in subscription-europa-babel-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ac9f5ef5bcf96887f2c16de07fb146a1ea8f5943c3aa74efeb025cdadd5a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140271 Malicious code in cache-galaxy-titan-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41f87fbda362c14ed0d2ce294e7042bd6d3b72ad11ffe6d1fc90a4c990cf9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146783 Malicious code in publish-ganymede-cosmiconfig-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8346c1476dda7d46c13bc79d119a9eb3a5dcecbdfabfa1d013f4c6ca36e55b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144708 Malicious code in markdown-pdf-sqlite-zephyr-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195291aa189c6bfdaa7f3956ee1401e30637c563743c36d71d9c6e0cd6aa28d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141328 Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e20a22a9c22769398e8739c99b3cb32ee807c0d7b81540638278571f89a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142560 Malicious code in forever-apollo-oauth-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90943887c088c5605934a7f3eb8800f69d5e476dce2f64c9ae90f658706a9516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147615 Malicious code in sagitta-registry-andromeda-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e537ce0a5cc5e46f30d717f43d4ff0980a85f8ad7d038de681d111fae1a26a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...