MAL-2025-142238 Malicious code in eslint-plugin-public-forever-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d03336e11c27ad162f3de5c4a1d791e7294c5177763e8c8499faf2ded3fc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144743 Malicious code in materialize-fork-redis-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7330231bd4ca11a5cda133e886e1e711021f7dc403545ca5b0527970ceeb58b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147523 Malicious code in rollup-plugin-ultra-ganymede-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d84fda97f34b6e4d7fe644721804df274f83af37ded2fbe3c78cb14d629540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143656 Malicious code in inquirer-publish-mysql-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab591ad24678b614fb49b9d2e1419c4f33408b39c1c8d139ba56bba953149d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142500 Malicious code in firebase-io-webdriverio-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905a337a5a8d66d4416fd0b63bf9a60bd94e7bf2c351c452500768ec80639ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142191 Malicious code in eslint-config-bellatrix-protractor-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf8253f0bb4c5dfa0706e3aa11ece2602cb3173ebc9d40933c0c990a53a0814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148033 Malicious code in soap-sagitta-perseus-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932709840d3cdd8e0f3e9c81f132075f076ba9ff6964bed1694cd88674c9ecf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148684 Malicious code in titan-mui-procyon-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1248ced1e49a7b5b8fd9186de24b120fdbed1c2aa66d43c5beaab197ec4d1247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140607 Malicious code in chai-virgo-spica-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89f745f535148fb9dba116bf9fff2d297aea6b16488115eae1578780426684e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143099 Malicious code in grus-prettier-plugin-markdown-babel-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00f4e6be82f73104ac4b5a4fd55b9981d7034b9a4fab5d5cb577c6985de63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142945 Malicious code in global-nuxtjs-antares-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3fbe6a0139f93fe7eb3f20cb671d10dfb136b047d88376d204c1af7a02cdae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144662 Malicious code in magellan-sedna-mysql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b65804b6bb09003a5cc8c885d0d244a90568ca367173e330cce79e3d3433c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146686 Malicious code in protractor-gridsome-levels-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da0a55e3c7d60b91f3bf11a33482c6cf3f299f5b9285ece091b50d6d1699e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141044 Malicious code in config-xenos-procyon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e11ee2587ab693fa07da5ba1b7292c5c142aedc22b57b70a9ab70a5176f3aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141906 Malicious code in electron-builder-jupiter-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e6c34d8ac0eb601de5dbe1d8ffd3e9486188b296e4dabf08a27344637a8159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149488 Malicious code in winston-dione-playwright-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2acf1752fd78aafaacb9786f57344172402c394a983d209ea714bb25c15b5cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147291 Malicious code in request-css-minimizer-webpack-plugin-resolvers-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c589217cfc86f7c8e3f88b2b6a0e481940efe817e8590641395b29878ff94cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149586 Malicious code in xanadu-async-prompts-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5fc19090c0485f4ed4364f6aa000cc1dba19998acc98c7de95fb08cb3b9b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149763 Malicious code in yakutsk-config-mutation-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e87fd837a3fdcb7f7a0cd9c466ce5b1a6a242da406d99ac0541734d5c18e73a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145205 Malicious code in mui-nebula-gemini-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0997b9321571e9cd41dfbf04b6b87f0ca2550c498b2cd413ea4b5f0355f24d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...