MAL-2025-140109 Malicious code in bootstrap-jabbah-xenos-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33710dce388dd4b632ad1567acb21a3bbcdd1c599582c1c9ee8d2f1bfb012a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149078 Malicious code in ursa-venus-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e21328f1d7d1ad0ab1a8c517d9028d0de2ec3dc3364feead5e8eace5a4d4288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149488 Malicious code in winston-dione-playwright-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2acf1752fd78aafaacb9786f57344172402c394a983d209ea714bb25c15b5cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143254 Malicious code in helmet-miranda-halley-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89d6ca7cce0fd80ab186246ce104178ed46869da529802ed81183e32b0ab323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141044 Malicious code in config-xenos-procyon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e11ee2587ab693fa07da5ba1b7292c5c142aedc22b57b70a9ab70a5176f3aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141012 Malicious code in concurrently-rollup-plugin-pino-pretty-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fe62b6fcf916ddbab500c08a99898ec65b9eb1a259f6363bd0e30f51ffaf86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140243 Malicious code in bunyan-heka-spawn-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db5614c01d3e27e5f9eea4ed9ba6041855f567bcb63abe84b582e58f8116e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142276 Malicious code in europa-jwt-cygnus-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55ce391fea8ffa909069d2105df952902ee3d59197e6391746408eaeb185e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139434 Malicious code in antares-prompts-wolf-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b563444307ba12730be4d4dd379b0f4ea57a6c753184d0fb9e20c6dde6e5d9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139340 Malicious code in alphard-rest-slides-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000bc6d60c2e882024d14774757d45f887e1685e183159005595d91a44a2f2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145720 Malicious code in nuxtjs-webdriver-manager-nestjs-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552bfefc3abd180f3221957493030336f0321332917a5f0e47b77fbf14eaac11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142694 Malicious code in framework-rigel-xenos-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea682a7772329c2722aec8ab0885f3f2680f15f20afa3d09c05cd2b909698d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141312 Malicious code in css-loader-procyon-promise-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd32db1e172bcaef32471225d0238324fae546aac899d0d778a7be7bbea29aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142191 Malicious code in eslint-config-bellatrix-protractor-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf8253f0bb4c5dfa0706e3aa11ece2602cb3173ebc9d40933c0c990a53a0814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146812 Malicious code in publish-schema-scorpius-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69853a39d7a0295572d26acde7950f2beaf45da49f5298625f19213d97277f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142041 Malicious code in enceladus-vuetify-foundation-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72476d2b806b3687d1fa43ef3713ada1a16d869cb5a1f91e4df2ed45c57b6dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139626 Malicious code in async-hugo-yaml-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c0e1b1c15e19a880c6cb5a4a289493b09db9ef6d668639e8e3419b0c1d2333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144662 Malicious code in magellan-sedna-mysql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b65804b6bb09003a5cc8c885d0d244a90568ca367173e330cce79e3d3433c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141707 Malicious code in dotenv-enif-carina-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6246769778c7fcba8c511e8df6a134d3b68f727a2080940cc9609ecaa912b2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145920 Malicious code in orbit-xml-nightwatch-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a3f62aee87ee36ab9ad55455abe4b9e4f611eec1f01293cd9ecf65ddebba0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...