MAL-2025-149881 Malicious code in zephyr-capella-webdriverio-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdf3f9478b7e1519c2f0bc114431a7ea71ca6234321d8440f001dbfbd927e29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139327 Malicious code in alphard-indus-nconf-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e761246ffc63d2bb32ee5f52d1719cdb8e4c275432d80320214bb2ec3ae42693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141724 Malicious code in dotenv-parse-variables-jwt-soap-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ba016402a8e1f026cecd68e7a2e6cd6724f0a32d050b391c7016e08c40022a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148259 Malicious code in standard-schema-ophiuchus-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0e4548d0345c3c25e6d215a91cfcfd790bd26b81d2ff925912297004814b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140982 Malicious code in commitlint-exec-express-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb3b8d5b4ab25056cbd1b06eba3457a1d6a463bc5d8d8387004f7ac002a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148390 Malicious code in supervisor-centauri-aether-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a19158ab0964c26c031c48bf99bc4fe2f208abf9dfe80b638f260dd235aacc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145315 Malicious code in nconf-eslint-plugin-postgres-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27040d3214079953d8c3c96719261f6c8568a04a0970d14d7e3b6677afbb30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141176 Malicious code in cosmiconfig-convict-despina-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4641d82903a6b267b849579cbabf0ddeba17d40fa468be2cceeadf773543f2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144330 Malicious code in less-loader-sirius-perseus-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144751 Malicious code in materialize-puppeteer-wasat-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a563a4ebbc263d311bbc1282a62b76d3289a89eea661bf5c04aa50829af776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144101 Malicious code in karma-deneb-umbra-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97473185bef024c93924990cbe14eeae502c2bf156a233ff17b916ea9c0aae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141938 Malicious code in elektra-blitz-development-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db17c3573c2afc48e71e8d7d0defeea06ca90a04b2e4462187b50a5d95159e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139901 Malicious code in barnard-andromeda-indus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304c748107942127c7c1d160a9a483e68ef0f9a68ac202f5da185715afdbcda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141373 Malicious code in cygnus-levels-subscription-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90b2d8d106bb26841ff41f634e063ad188c5b35f57d9914a41b250957cf913d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147903 Malicious code in server-passport-run-script-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea74d20cdc6fbddd62cdb479131c1ea4b36d4ae95fc8be2221fff390ace01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143057 Malicious code in grunt-cosmiconfig-inquirer-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0b021a09de30d4b323ddd5aae4aff53aaf7dca04abdda73e5418cbb0514921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140356 Malicious code in canopus-centauri-yildun-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8418bdee91971777e1e5b5c7ce9f2b82d18f2f306cc1bdddb891c9f9ff80c82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149577 Malicious code in writable-pipe-terser-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b346e7180c776eeac064af2ee804e6e3afb1e9fb00242af926790c461827e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139269 Malicious code in aldebaran-cache-repository-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e821d6c2cbbe5b21bc92702dd5c89263ae6d7671b2afa2aa5e4766fe310d9d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139725 Malicious code in auth-mysql-element-ui-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b0b37c887e82b3f21d7c2b6fc291bf49b40f5d203b7087a9ba391acf920be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...