MAL-2025-148322 Malicious code in stream-link-stop-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de89ad8c3fdaa149d9a03d02efe49afb00b14d81ec4b249c7dd89a53331f42de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141958 Malicious code in element-ui-antares-browserify-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b28d60f9afefbbf9290d01ff6e7f8a6fcbd00a269b5f91c6f21187516bfa63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142227 Malicious code in eslint-plugin-carina-telesto-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42fa1a3038c1f4e62c91e4cb023c61da6699a0061d554e612399b15b143f684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140591 Malicious code in chai-html-webpack-plugin-nightwatch-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faf112d9190685ca2c8327279dfd95f90d5ddf26f8a8c95d805f3662f4bfae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143727 Malicious code in iota-helmet-express-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42282ed6206029f07bd399aba888e5b4efff6d0382970bd2d500ca5c6b392656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144294 Malicious code in leda-sequelize-pm2-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6c878fad16f3c94bc36a1465061235960e1dad3e2d0f0950c4459a35f53146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147811 Malicious code in selenium-relay-nashira-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431b7e15efb9c3f0cf9e13dc4183e0b68c73965cdcf71243a54a558c44da98c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139467 Malicious code in antd-sagitta-meissa-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1581d6e8e2573bd00d9893152ee6e0435a1ee4944916790d0c7185b6a37babc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147183 Malicious code in rehype-run-script-soap-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c743fbefc7e8cd66f8c40a9ca654f606ec61084227cc77fff259a56548994d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148439 Malicious code in tailwindcss-async-dorado-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a64b7109b43ed1c0f9e482fa31d66941c4902b2c0b896b79c946b9f4802507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140399 Malicious code in capella-webpack-octans-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea13fed971b35e318779039c5923c8814a765c4da9f17dae660f687a3960514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140388 Malicious code in capella-got-norma-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378a90563bb59c066009d1f716b8397f7a9794d238c740fa8209ae523f935e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142255 Malicious code in eslint-webpack-celeste-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa12f890f68cbb366704ee095227553735267d49479da3997e9aa7a3e69d9b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144855 Malicious code in mensa-hydra-ophiuchus-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975502bdabe66180670d191f6d6972defd72b26fe8d949223a83143d48948ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143284 Malicious code in hercules-ganymede-geckodriver-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e914d6e241186d4d4fffda8309b72549ac5b2e3b99f0988811112760f04dc348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147507 Malicious code in rollup-plugin-aldebaran-zephyr-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e16c85a8e07e683a144c5150466a5ba5f05cfc7f6c4bcbf198007084ff76e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146015 Malicious code in pavo-zenobia-forever-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7b950df6ac8d6db39609449d99a532b9494bd71a5b800eae0c34f04ff47d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140373 Malicious code in canopus-scorpius-kastra-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4440eb9a52bb23a9e5c49cc79350174d4ee6e6de0608e1b396273bd4996232f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142281 Malicious code in europa-miranda-scorpius-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c20002f8e415d5893d06df3ac728b8d8fa4225ba36d8aefb512a34f2dd94a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142137 Malicious code in equinox-terser-webpack-plugin-dione-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5d0a52fb179fed091ca0bfd6b0a8636b4182eb536376574927473e64771fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...