MAL-2025-144448 Malicious code in lint-staged-carpo-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8e050df62b8e9d79261093ea9636c346dfafd383a4b7cf736e5cdd571aac4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139574 Malicious code in arcturus-nightwatch-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c280417853cf4fa3ede78d1dbb013a5560315f5f5d0530853f868a8b13e1d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140168 Malicious code in buffer-phenomic-miranda-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797d2e82ce63670112679026f7d3cac4b6e5ca661260cd094fd9a863dfa5e963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142461 Malicious code in fetch-virgo-pegasus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145965 Malicious code in parcel-mensa-vuetify-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdaae7c1522c825d5fc88e7dee72b39025eedf7b9ba29e41812384ecb3969fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149811 Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144174 Malicious code in kinetic-impulse-polaris-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141024 Malicious code in config-ganymede-hugo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972c4937b0a1a11715489b02260c4d19fd928a94e7a408ded4575366da6e0fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143835 Malicious code in janus-sirius-nashira-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9a413016e30e6e0c4bfd6ba48a24fee36358f5ca19be2716820031424ea375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139901 Malicious code in barnard-andromeda-indus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304c748107942127c7c1d160a9a483e68ef0f9a68ac202f5da185715afdbcda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144007 Malicious code in jsonp-sagitta-proxima-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa753953218b29386b71fd301e0f77b7ee751f4c3fe229d8ada58d8b4905b054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146764 Malicious code in public-oberon-tailwindcss-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c4502aa3cf663ce3032721cb96acea46b65f80e204337edf55f20827f6328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139439 Malicious code in antares-shelljs-vega-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744231827bd2a82b04772b377409872008fb9107fe387353ebbc28a5be47aa13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144860 Malicious code in mensa-process-nightwatch-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1f0262ed9e2a8e84f68ed2b67789ba79c7a2c3aa63a82cbebcf527775b5a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142133 Malicious code in equinox-sagitta-changelog-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644e6b2aeecc69b1d485e73ae0c18dafbfb77ae6e3a2007767895e5a4f5cff87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148167 Malicious code in spica-magellan-css-loader-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8f507c0238aa2b70a6d45190da561364316f170d18e907d2595af4d14721e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139220 Malicious code in adonis-wasat-aquarius-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5bedb60985af92275f2f3eefb5a8b036447dd8c91af4f79e47cbe9527440840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145228 Malicious code in mutation-phoebe-janus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7c065e012037e306c733ab9782db13b462d8ae1748e1eca093f8516636fda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139212 Malicious code in adonis-inquirer-webdriver-mocha-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2a926174d560c4a0280fc751da44d37f6595ed4f96e833fa6dd0cc2b1b17d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-changelog-nova-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d596d73c5cbb63934b0f5f3cd16fab87c035753ffb74a90e8db72291c51a7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...