MAL-2025-139227 Malicious code in aether-cache-telesto-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147753 Malicious code in sedna-altair-jupiter-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490579ad343c9d3284e0896905b2135a441bfe41f9fdcbab1d7fdcd7f8d443e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145747 Malicious code in oberon-io-thuban-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e81b30691489bb6dc1477cfaf24ce6eb3eeecd6f57a6188f5d9eeb9365266f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145200 Malicious code in mui-dagda-loopback-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26eabb85f51c5683b53fc8263b96d185f7eaaa441a518da48c50c0d6bfac767d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149584 Malicious code in writable-xo-zenobia-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb79cb573188c5f1c88906173ef040f515a4e0f8c4124c224f975bc85f7e44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145129 Malicious code in mongodb-grus-despina-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb803ca4e42703dfb4576e1d080b3184c952880975f29de14f49945a4552af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149740 Malicious code in xml-version-rimraf-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8e258cbbd7b05fc7b948248f6d0922d4fcb8d1fd555abab444074a2c1a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149748 Malicious code in xo-electron-builder-passport-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4258594833b0af81aec1a8b3b0c76e3583e9312af81300ca476bb04013958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143771 Malicious code in jabbah-callback-lacerta-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b83b3a3514c3342e03ae6ef7c003766fd44a1062721d488bf938e4f4a48224c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141322 Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2036bd03a92e217ea6354ba65928a8ff78ecbf6c59fc278e254c0d1d3153fa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140914 Malicious code in command-morgan-yakutsk-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da47d74a630343aea88824f76517e4580ba986a5308298ff9c91ea0dd53101f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144194 Malicious code in koa-husky-indus-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9f7e42701036c4e7b90136d710172087d9eeb7bf8d869ff9064aeddd8aceca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145434 Malicious code in nightmare-envconfig-nestjs-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce283718877e46946175f033597ea72cdc7ff55bfdf108784806ef510eb5bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147683 Malicious code in sass-loader-rate-limiter-aurora-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ad9fbff58328e4c83ba974785be6b6070e9643bf90ab193c6780758b34c36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149009 Malicious code in upgrade-csv-gulp-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a880b2792a6069fa0026a9e74e70b5b41dc7ae0ada9b9067a2c3c1dc94156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145445 Malicious code in nightmare-rigel-playwright-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c7efc41fad8d61f889b7eebf60a8ddb47d40233875ab87da2ce0fd87cbef8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145166 Malicious code in mongoose-ursa-csrf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff09a0e2775c3f104292df18673f57ff3a4052c29debe9466012a0994d4cbbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142090 Malicious code in epimetheus-apollo-commitlint-config-angular-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da73a2148d09e8d12fc54a7f894411b1f1f805497bc1d98cacc8c61e64adf08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147227 Malicious code in release-it-nightwatch-jekyll-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5796729233de51edc8c296497cfcabae7b685d63f4f1c6a8c094d2ab4513ade2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149343 Malicious code in webdriver-mocha-ceres-luna-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7a97f730f21cd4e2b8910f8c1586bab544db567eaa521c459296caeb2b0542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...