MAL-2025-143830 Malicious code in janus-rocket-helmet-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf25cb6683a7b566d5fac63c10dcddb44280307cb73219f67c7a9d006ff0d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142890 Malicious code in geckodriver-xerxes-capella-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8243976b2a0fa8bec3fb00bd12d4ac5e6c780a4786f554e126b8c60c391f23f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142466 Malicious code in figures-elektra-server-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbbbb9b2520c1478dfb726fa301de4236a1b2513ba8a3919ab86d5228a7ead2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146504 Malicious code in prettier-soap-io-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8f6b1234992cc9122d8dc53fa5c86ab2c85ba860f34355df6f2422a225026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149333 Malicious code in webdriver-manager-scorpius-ganymede-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5285e61f586138fc557d3e0929f99231cfa05eaf4a8ae41d7769f30ebd2e99ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142181 Malicious code in eris-public-metalsmith-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cee348a9b3e9c807a98d182a4eb2314c88e555a006cddbd40e0be915a84a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140320 Malicious code in callback-vega-ganymede-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba68ef1ecbe1a9f3230f0d417d74740cde111180171008aa80948ac046ba77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143823 Malicious code in janus-nightwatch-library-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccaae8db8792428dc7440f4cee2f05316ffa925f7b96e7cad444831d4ce99e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149014 Malicious code in upgrade-halley-hercules-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8fea094d24b08ba278de689ffd3f83c4c26bad5f1a106c99d860a488b9ae8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145883 Malicious code in ora-europa-tool-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e006f42e194527ca2cc8573e612feb59b34bb39906c9d9544474f1576887f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148320 Malicious code in stream-jasmine-global-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f686c5b6987f2ad2417bf9733e7e8168e25a0ee0b268d6f99281f71f3854337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146653 Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146499 Malicious code in prettier-plugin-markdown-xml-ursa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bc7b7aecb7e4c96ec7cac92f48ff77c3255685377d2d2afc077e1a4505538a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143144 Malicious code in halley-grunt-firebase-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147050 Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c1b7077ae1d503d6fa1608613dae97013280d40f52920ea01fd87b77227ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147596 Malicious code in sagitta-express-reveal-md-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec668e95fec75e52b44abe1d7cdc557d71c98e8c073a395a85f274895955b865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145482 Malicious code in nightwatch-quantum-cosmos-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d523ee12ac9a0f0a61a3f8cc6009f7dad2678b53347d3991cb755d728b8a357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140964 Malicious code in commitlint-config-angular-global-dotenv-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0be1e1d6e170b61cc8ee04047225ecf8b867e4a7aff9a05bc72b7e10f77f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148947 Malicious code in umbriel-style-loader-commitizen-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4f5cea50260213f84fcf4c8f2451da124b5cea0c4b36de26b768c9018810ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147196 Malicious code in relay-auth0-taurus-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d514c541e34f485af825f322e9983682defc50b1bc863469364fc19e6b5a556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...