MAL-2025-144163 Malicious code in kinetic-atlas-run-script-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab40e8a4f91dafe73f257a24987f8393097c2eca205847d0ee496bc84717881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143974 Malicious code in json-gatsby-eslint-plugin-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b7d24cfccff24043a5bf318d127b3dba80547a3c1e34d19ee6f55251614c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145416 Malicious code in nextjs-hermes-sails-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e952a6363545cacdbdab17a2bb4c64c953fc7a1614b65c9e1e5a18582cf3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148496 Malicious code in telesto-middleware-dactyl-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e618b3a34a547058845867335ff5346d818e294aad90c6623367b21f87e2e618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149080 Malicious code in ursa-winston-slides-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31dc58f491ff407cd1fd6390daa9fd901f10e866a4805223a569b09be8137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146416 Malicious code in postcss-magellan-ursa-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce8458ed2741ec54d9c40e4518395ab915bd46356a551b9e18b8511ef6e3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144788 Malicious code in meissa-altair-tool-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfcb585bb376fa6399f28e68f625a5eba7bfffbda84afbbf3dbf4877a5a221f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147338 Malicious code in rest-altair-csrf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d12f9c3117cd64df99f3421c074d81f3494830740d567162b1decb6a9b9850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149486 Malicious code in winston-cressida-pino-pretty-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3441bac52f6ab46845742e476292cd0397993919d4f7c7c5a3ac96275eed29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149390 Malicious code in webpack-bunyan-xo-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5edbc209cd1ba1cab6f49ce0e8c5c7ce4cd297e85ac19b2bfff0c1c77377034e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-package-spinner-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67481eaff1ab609487e64181fec0c051ced741075c652753d934342f610f9fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-passport-event-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bf8003ea6e13f7738d4e65e37de9cd73ca9fb6ca0cc7bb83f4a2ba932a3f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-quark-middleware-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5904a73a97ab4e110d68c896be2b1a4b127e1de6de120003269bf3fdb442bc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-fornax-start-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6a2c4abb42f5f3186fb4734f53bb98dec2cb33af1fd697699823bbf6cfe4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxy-vuetify-kaus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2033820f97f916e773d13ef8133bfd0610ebcff696815f0c5eb8325a51bf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144828 Malicious code in meissa-prettier-plugin-markdown-celeste-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8487cd6f918d907b2e090c92c6b040fb136aa96869c210a9ed51a5530e1c979b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142431 Malicious code in fetch-adonis-less-loader-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81723ebe229b7643b5a842d320415ccd1dd88b5a3c2d5e2b93c7a1944563002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148251 Malicious code in standard-callback-venus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54afa4fcb2836ea95ffb5db003dc4c6f9a022be7b0b74462aacc150cf13c0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142552 Malicious code in fomalhaut-rest-xenos-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59d8633530988e6f0c2f5b25ba330adf84ea689d15e0e288004ed1d9bad46c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147509 Malicious code in rollup-plugin-async-shelljs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd26dff81921adafb42e1a04235e7606401fabfd2575d8186a6e2b9b0acbbe14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...