MAL-2025-148796 Malicious code in transport-playwright-zenobia-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c79d7663c95b031b90b984412a77e6cb307fbbbfbd3f9cb51a1ef7206d484b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142435 Malicious code in fetch-bootes-concurrently-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73770f8dd611198563c5d0eae11af04fd9b01fbc2d8ab53e3b77989f6c6ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148299 Malicious code in stop-node-config-zenith-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae899ccb8291de7f8de581daee9c0b626457329723065edf32d96a66cbaad7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144655 Malicious code in magellan-pavo-loopback-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c98a09c1d172ad9eb72a14167600f9052a467ab7ce122e23fba068359491f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147745 Malicious code in scripts-quark-antares-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4a6dba39b156ce3c014140ded3e32be802ee8526b3557b23172727a7bac5b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146500 Malicious code in prettier-polaris-avior-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3192b3b22373e63e2493a019959c33075e6492d8e743c885cf39b43bda1abca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144861 Malicious code in mensa-protractor-json-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef0cf775eda6da5ee72ec9ec108786c8ff2381ea7d373895eed288b9c05b03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143291 Malicious code in hercules-private-mocha-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e752500613866d1f86af372b0dbb9fdc991befb9a72097f6aebc7e2846ef29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147856 Malicious code in semantic-ui-schema-kastra-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78ff75cca6dce1a6065ec67baffcff08f761cb7c53cc45a0ab0529a5d9b0bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144900 Malicious code in meteor-bootstrap-impulse-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077869429f1ca60fcc59df622b3ed1c2ae79c5d9f64595ee373a3b164d265393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145215 Malicious code in mui-vuepress-blitz-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559357dbe4c70791f56127af7365aa7834d53e0f4560598b2b3dd8a8df08b753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142697 Malicious code in frontend-aldebaran-hydra-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a228a177b4590a370af66028c4094eef294a1f44d21718305b5c706e5d10278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139694 Malicious code in auriga-zephyr-cosmiconfig-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5239f07833ff779bfa840185510eabd8b41c52aba14648b5989d7abaa83cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141601 Malicious code in despina-nightmare-grunt-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b9929aa7b277334fc38d873c4779114970d886db7dbfc06272eae08e82a285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140211 Malicious code in bulma-duplex-sails-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde8cd0c4f31aa574d4d76669ae80f087cec7b7802d04beb5326c07dfc6174b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142649 Malicious code in fornax-radiant-buffer-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2b0e8909e37ffb7611e51a5a0d1e31f10eaffec7ffa942ce0774a9d78860af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143306 Malicious code in hermes-chakra-ui-phenomic-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b33c27a1c1db0a48758f62868c7102a48a907afe4448ee7cf56dd1673ef0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141094 Malicious code in cordelia-blaze-mini-css-extract-plugin-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7031845d6915d8df0ad0345b9b289d606eb2fdaa90aa16ce82af82d3da234c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-zenobia-lacerta-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea17d5848803266491010b4d3d577f876411cd296d7e9744001bb9a7956f667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-quark-io-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541b8ef8907a8039f45e30e9d1f5dd19105a31f1c5741ffb0a9e4077fb2da0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...