MAL-2025-142138 Malicious code in equinox-wezen-mocha-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b388b88203e7d4b5e080a34626aeafadd905f86c6753c0ecce2002dac4dfcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-pegasus-chariklo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6997bd3466d1dbc0d2d8e506913bb83f681fd0e26386f1abe92ec640aecc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149169 Malicious code in virgo-scorpius-duplex-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ba2c6e8699676484b8d7953e6c0d7b38439794a27dc8a4a4f1f2ca065d099a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139843 Malicious code in axios-vulcan-alphard-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca1e8b0aa7faadd1ea8a4ce8af230ea758e09ae252e3adbd033961f243ee51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145734 Malicious code in oauth-inquirer-farout-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9db7a24ba980ff244f86a02b8ad82e55ff706357f0b6416a7a3c744de8ced2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146653 Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140336 Malicious code in callisto-jsonp-avior-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908f11f5f4c7839935f96d8f7d7c73ab4922cf0177174f9d9d4877093b50f428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149385 Malicious code in webdriverio-telesto-equinox-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de1350f6b3fe53b352c5f1540c2f4c83adf90f698ea739e790969583955c89fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148434 Malicious code in sync-telesto-configstore-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54779bbcb4eec02fabbaa36234e8bc29bb9dcc9fb6945cc112b983d94e6650c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141715 Malicious code in dotenv-parse-variables-dactyl-hermes-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553918f29ad698a225d2b077fc60b1d34a4522e23490977aae6619892944fad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148386 Malicious code in superagent-transform-betelgeuse-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d46b2f7461a6ecf7dce969605db3f238a1d45d20793b2f02e16c0bf2f66c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140209 Malicious code in bulma-command-betelgeuse-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32bfaa4210000595932a3d32a2a18a8f1c906c8a7ee33d81f2ffd1ac11a306e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0665eff58f93fa7d6872ee7f7296767348a385c2537c8f02e446bb59215872ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular-amethyst-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32425cce44cc8ff232965905d82eddec12403be80b8d811019ff6b7ac5bb65bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy-silver-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa82b813c7e2f7ff59f68cfbde294487ed049675eeee4ba335438e9bff54088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138980 Malicious code in responsible-harlequin-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00748c3d2042e9b9898bd60ffeca3a9aac108a888ce82ab243cb07f27cdeed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139106 Malicious code in voiceless-white-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f7f9174de86f57f60186b94ec084506aecdba7fd0c254523d7d5ae231a821e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-ruwet94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d898d23692109e4f4533aaa876fe69f0a3d9eee1bace45bd01532322f949cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tahu6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2822320d83ffa7a7096986591dc0c0137413e6a7eca087ac01bd33d75a50917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c7f11a629df24c80984c1c314dfbb84e42f70d5e07c62c2ce90240eab8f8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...