MAL-2025-142791 Malicious code in galaxy-materialize-morgan-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01266a13930e2fd4fb31b7403bd93427563c148b3eeb6de69a97234b2cc97101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149300 Malicious code in wasat-rollup-plugin-barnard-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1d3a097aee4609b15fc4c6a04bc8046148fb34d51616334442d6a7c9b927e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146325 Malicious code in polaris-backend-lynx-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3040abee7c495e48c1a8af71791a2cd96cf6d49319dbace10478b91cde00f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140557 Malicious code in centaurus-vuepress-concurrently-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3d17c254d20bfae82b30318943e94b6c475fe6eaa7f65fc00ca1b3cb773d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145430 Malicious code in nightmare-callisto-phenomic-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65f7b7ee44e32dda4e52a8371da05ee372c02c5d81f34199e3bdd2cc6a14edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148105 Malicious code in spawn-registry-hapi-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce6c4931686578ab6925d8495679d37db70997bb5117ee12b15a35a4b0af5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-csrf-jsonp-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e8430dc5c129cdb2b246c95ed2efc76f44ac2df52fa48247c0b286701cc854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-transform-kinetic-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac90554ba04c26db8c766211102ee31b9b49ce27e14ea6f2e29a5a1bb870369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-xenon-chariklo-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed567406ad5a8211787995ba5481b7eadb7b526a75d40ee56105a29adc3752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145616 Malicious code in non-blocking-meissa-toml-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d78f4ca4fa0376bb75b752a5cc25b42b01e85ca7adf7a6d68e09850b9e8fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145229 Malicious code in mutation-puppeteer-dactyl-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5573cde9eb7f58c50db9c8a3d2f003010d9e86a0331f9e8cc3f75dd851d1b6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148425 Malicious code in sync-jsonp-less-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ef6cedcae0b8171fc191b67ad90dfebd8ac6e394c7ce662b8e558b22e9d56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-sqlite-pulsar-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d14913edd6b7adb3e586d29443344e3a2618df7c5b9aac366ee0a84441bd20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139693 Malicious code in auriga-xenos-command-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec3c3ef11e14e50a517e63caa9aca355427c437df4d625dc2d40a9c70a4b22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147919 Malicious code in shelljs-luna-sadr-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16462d0ef7a890863b7fa94c464a2b54c651b156d14de9f454999771ad47d84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146569 Malicious code in process-selenium-quasar-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c223c3e8c566dce16e6ff836337eead79651732149440d97da8f0b3531aff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140745 Malicious code in child-process-fornax-ophiuchus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e14ba578f9389f96c9befb8dff2098b3c6d0e1be62aca0d7dfb57d570ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-spectron-transform-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7699ee15c3365e2d516a2c2c0477fc547aaf34fd773ef8b4137ca6cf01a765af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-ganymede-nodejs-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfd879ab632f0dd68339b7adf07134b5953b4df890f07de2df9bb6408002bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-aether-heka-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be60625e4315cdb6c9c73d8ac61b43d26e1c358e30d28b381c9ce97b78e7a6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...