MAL-2025-147997 Malicious code in slides-supervisor-apollo-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1595e06feea81377f062048d00a5c9f0a522ec6bd4fd8422ee3423902b77b5b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145715 Malicious code in nuxtjs-resolvers-procyon-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ef8b8f0982ee3179b95dcfe0d783b162a034338b46c0de996a09c6f4b3a577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142890 Malicious code in geckodriver-xerxes-capella-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8243976b2a0fa8bec3fb00bd12d4ac5e6c780a4786f554e126b8c60c391f23f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-protractor-quantum-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308e46b472bebeff2efbb1fbbf96060ad0fd6c95e3541493b9965e62b60eca29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139625 Malicious code in async-halley-adonis-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c49800a339e63e2f06a6f4c122c665e86c4094652566afaabe5ae0fba35868a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140855 Malicious code in colors-neptune-dotenv-parse-variables-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5537dac183ddea56fe80ce29f10e2395b13fd7e9a0c8af926ed0e4c2a5b4a9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149031 Malicious code in upgrade-sequelize-mensa-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0ff8cbb44b5e6aef3b12f19a391df695716e76d68aebf347771f7ae51fb08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143351 Malicious code in hexo-sagitta-commitlint-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8d4af8548fd6dffe8219bc5c04d3605874cbaf28f4a936efcbd967d53b400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145497 Malicious code in nightwatch-webdriver-manager-process-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41bd5e517f4c9f76a221414aa3aba22babf343cdb3b36796769efbd58eb267c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149403 Malicious code in webpack-postgres-draco-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765202ad2c860e75154b78975f19a9173bd6a6acf4f554a2f5f02825a71f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144293 Malicious code in leda-scorpius-hapi-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8de267bd2e8c54c47d2deac0ff1a80d6d690c3108abe77eec00b8087a5347eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142249 Malicious code in eslint-spinner-websockets-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0421cfb15af5d20fdbc70a7059ec4d30d9af7d641823e418cd674af5d3f60b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146123 Malicious code in perseus-vega-leda-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbaeffe04cae6de02e05a62a3739a301bfa80d5c4d4353e8d1674a2144edc320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146330 Malicious code in polaris-commitlint-config-angular-gemini-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88776b0e7b1a7004d098a5bdbfd304045d25452d6edab88e8ade08aef0969c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139364 Malicious code in altair-rollup-plugin-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142466 Malicious code in figures-elektra-server-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbbbb9b2520c1478dfb726fa301de4236a1b2513ba8a3919ab86d5228a7ead2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145646 Malicious code in norma-json-stop-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5335b220c0ab2dbd39420712adb24b8f7f7628f720e7a229cf118d8b3f3a3493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148947 Malicious code in umbriel-style-loader-commitizen-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4f5cea50260213f84fcf4c8f2451da124b5cea0c4b36de26b768c9018810ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147515 Malicious code in rollup-plugin-event-reveal-md-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4680df8d18c2b591b237a1890690abdcf213d5886a1092c1b64926588d5838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...