MAL-2025-139310 Malicious code in algol-stream-node-config-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb942e7823a23ce7a4b12798c95aa39e61aa96644c69acca7860bcca2ad9de76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143001 Malicious code in graphql-deimos-vulcan-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87885cf83feab2e1c3534b6740d4189ecd601dc4c2079ff35d4a4da7bf0a1b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142679 Malicious code in framework-dynamo-react-bootstrap-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de049a6db6a95c67a2bc0734868704264651f3b278204b15e772e2e7561182d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147533 Malicious code in rollup-spectron-acamar-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8656fd896287bd8c9d143d4a1422fefe39929d2ccb75fa57c25ba1c57a304b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145267 Malicious code in mysql-websockets-webdriverio-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494bff2878a97456ebcc90ae6974ee2cd47cc9a3e8e24390be57fc6741f9763e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148227 Malicious code in sqlite-ganymede-jovian-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e769bd671055035cea71893fdb0a3a7e4aa2012e5d37a9d0e0f609d74b13e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148818 Malicious code in triton-global-unuk-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c921ce746228fdf87fe40af86967ba32d1a97b119bba6f2f8e9250b4306e22d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145092 Malicious code in mocha-sedna-css-minimizer-webpack-plugin-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8604a20f4f2d848230348bc9bf7b4018a8578f21adeacab02ee39ba2a9d08702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142080 Malicious code in envconfig-nconf-magellan-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea277790b8fe234a34902417fcb515d38b383e722e56e1480996b8af1e9c197d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146429 Malicious code in postgres-canopus-supervisor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0ae963def08804b0e22002cdc6ddc6c066f05c1c505b3acf66c67b8716c8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141605 Malicious code in despina-process-scripts-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfde1fa601c3eec22c025c031edeb243d99a0f5344dbaa7ec5e5caea3b93b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless-white-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c01a2ba45f11193c6ab2f8a15a4a8f392c6e7ca344158808713a376df8e8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138769 Malicious code in hard-emerald-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e44d60c14c51c84d88f48ff15851f928b0fbbc195366643a4d8c0be03783fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-sroto93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a90b421122f2e0fbac87db3604db291a00c913063e29c2519cb9d712c363819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3140103a8ae5ed88fc599205594e17f8e63a151d5ba7e00b1de6828790605c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kue45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bad618790584d34643f206d3df3e0596ba14ceceee44871016983e52114d7fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-dodol24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac24004e1d433e3892bdea4e8d7fec47a1206284a2e0a214a7832614fb338361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dadb200eb9055d39dc7fbc1ecdd6e2f8d605a275041cf4d0279c2a8666f9ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tahu55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1557931468f25f2711ec4c70a01a733d7b7e4c6659334fd60769fc7eccba5bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e92a1a3d626868e25efc73914971715c9b9610a18cadaa4a56749f3ef90e514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...