MAL-2025-142484 Malicious code in figures-upgrade-hermes-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99694613b2b8c216e79bbd7036cf9fe7165bcfc4201aaa8525a31d86f58b634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139780 Malicious code in avior-quantum-quito-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075ce8326864624245be5fb57fbf1901c47da14a12275f3443eda7cfc7e146ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139258 Malicious code in airbnb-module-winston-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb5ec25abac37225c8be7b23ea2da3a0519e6735cddc384929b39303ffc3671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147292 Malicious code in request-despina-cors-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2babe9192364defa8cc0022c5e6f27b52416c1f9c28060f887e847f1cfd9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149427 Malicious code in websockets-solis-eslint-plugin-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127e7780d8d19e0da2569909fab63b7acd7c8241049ab9c677f1c1aa30604d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149377 Malicious code in webdriverio-miranda-atlas-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b871897d8a5677672d07dadfea9ac627453eb33e2885050a1e42fe3e5aff7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139657 Malicious code in atlas-rest-quantum-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9902762b166cf43320d02a48cffdb04c5ee77d718482f98ae39137072d974b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143519 Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145717 Malicious code in nuxtjs-typeorm-odin-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb79bf491c21dcb65a74826c3c2b5bd591827c065190deef19b049a44d0eb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141436 Malicious code in cz-conventional-changelog-transform-kinetic-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac90554ba04c26db8c766211102ee31b9b49ce27e14ea6f2e29a5a1bb870369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142579 Malicious code in fork-betelgeuse-levels-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019cdcf865b6fa482e4057127c3724efff63c2661b5fdf4a6b48ab4086346ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147268 Malicious code in repository-json-pino-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978d0a10060a9f7559ff23ce30037fc4054b3b97f8c91146b25d2059d4a471eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-morgan-xenon-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e5976d20434dd4079fad08fcce891aad9b973e798c17384442b98ed929a1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-bellatrix-izar-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a856584fc3380af0d42fc31146d6e4f0eb878d35c362c2901800f64b29189a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-vortex-norma-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d27f7868efd1778340c9421225ec34498491ce2f4940a49e2df3a0c77f33a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-canopus-webdriver-mocha-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb6f11dd61b299f12d5dc5c0f67274a2e4750a1798259d163f335b3fb0d698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-bootstrap-mensa-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009c71f1315940d59a9b82670ee814e68fd91ab6279feadee976b4cc23c5e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-delphinus-rollup-plugin-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9c34f33a539bde2ccf44a29d598ce5087011b9183b6c6c3ea53c8ee0aae632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-webdriver-mocha-hercules-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c377541408e4dd2d0d9420417ccf43e9296fce7cdfd3020e459e556e4478417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-bootstrap-jovian-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525e031e8a6cec4e740a207a3e8d5cbdd6c9a25685d43ef8be3f3688b050da63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...