MAL-2025-140192 Malicious code in build-socketio-enif-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad3112923e340d924bbe9b609468fbed79b3805c41fd9f6c46d9810c00ae930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144952 Malicious code in middleware-dotenv-pegasus-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba0f4941cf5b5883299433711cd0d4f41306c2ad7d878869705eb0d5db5d10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-prompts-spectron-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffbac0173e72b03dfdaa1457db6cf12a4c211a78ec79e788227d443bb8322c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146698 Malicious code in protractor-sagitta-xenos-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375ff0f14b90d3c243abb0c7b21bce0800591a64aa75e666438289eda3647e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146141 Malicious code in phoebe-bootes-aquarius-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce10c3e3d36e1b8880dd58b72e16290d55fc1cd5effa53d778ccb201ffd9ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140047 Malicious code in blitz-impulse-geckodriver-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0618ce967e87623c467784db730cc31e57def2ab1ce14eacec960f92e0a40d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-mdx-geckodriver-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e66a65f7c92871312341129ec9fa61d291bde4e1563ac61a81dac4d5fb3e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-phoenix-hyperion-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952476952f00c78ac38eacfdc6ad9794c14e54caac5c4693071065f2db63bc34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-chai-remark-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-polaris-umbriel-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06219bbded3881721c3e959ced64cfc307b212d788ccb4e83daffbd8a6be1524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-install-octans-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9accc5f5e19d47c4312625e1ff6983f2f0adf820dc39d16c93cb33a2382f13ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-parcel-wasat-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62a7312843f5c6993959b1b1e02cd38fe30281e4bae43d85f034a6b46a350ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-yildun-html-webpack-plugin-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f516760bc57a8ec8d22c128a4277234f4b318ecd20f0497088a49ac229b1d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-eclipse-metalsmith-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb8a567b6169c24bd6deef07a712d7be0b560e33e7167f55dbb701734528a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-algol-jwt-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbfd639c290016964d28a4e4d3975f56f9bde2c430129df5be23d9169a6700be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-google-magellan-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7160e38108659c54f1103cd1042f9139fba98b7b6fdbadbf9c5691b01e5cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146140 Malicious code in phenomic-webdriver-mocha-eclipse-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc1fa8b436f5e07f403d4b7217a2c4f24e502c13dab5fe7573420b4b4bd8528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146606 Malicious code in procyon-mongoose-meteor-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6f06f34d61e17c30e370b3cd08343aed4d0f6b607db2ca3213a5a7459d1512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145745 Malicious code in oberon-firebase-jupiter-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b771677147a576d042064574bcfeab962f3a687f90f3b3887e89b1b32d193d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140384 Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783b2eb36e9a59e9842d099ec0ea4684a08d4090b6dc64176a70fc96e35fcd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...