MAL-2025-143933 Malicious code in jest-sass-loader-axios-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da37f8b8f1bdc913763359c08e8b7a35cf41c0a115cc87a8035c1244809420db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144256 Malicious code in leda-andromeda-spectron-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abc359754b3b2e393fd80d4121b35f0c9773f28d7e42125af828ff7505287b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146359 Malicious code in polaris-phoebe-spectron-webdriver-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f2df56849161afef0e61b35720a8f08f6de55bf2423f2fd6a6c56a34555cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142300 Malicious code in europa-webdriverio-chromedriver-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9261fa6b5e81737cb2fb47ace42efa2824f828b3c51aa7a92dc69a8f409c5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140640 Malicious code in chalk-gemini-nconf-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6261de89befe399d7560948dc5c6cfa28a821c2887121fb8f9e613cc581c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146332 Malicious code in polaris-cors-oberon-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdcdc635f425c0eaadafef3b4fe170b59d7a87731c13c7cb88962e27594473a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147005 Malicious code in quito-subscription-neptune-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70002200c66b5b4cc0f28f3f46ad6a34726cb88aae438ffc6a091fe5ed4e7af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146971 Malicious code in query-lint-staged-library-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc90179ed88a2d01fd66d407303c1ceeb80aeb0b9e92f750ef26f04cfe203e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146529 Malicious code in private-apex-async-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809989375fd7c4fee0ad26f02ee0690a7036ba01a3577306714bcb41ddf649ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144698 Malicious code in markdown-pdf-oberon-rest-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6736e26ccfb46fa55ed3f0c9f17c3723e146a0902526a7486246a1f5ab8b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147827 Malicious code in semantic-release-hugo-vulcan-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22669f1738276fcf0d0861f934453f7eac47379e02ba69f509ffde9eade5eed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139752 Malicious code in auth0-materialize-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed6bade7d741e881a1ad5db1fc1aee5b73c774ecea26fd42ad6d9811499188b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149299 Malicious code in wasat-restart-loglevel-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574c669fccaa341ec62ffab852152064911a73868724f75a4af37737a8830674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149835 Malicious code in yonder-corvus-semantic-ui-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6257c44e54245534f9269eb8c317701f310b8e97f0b8feb397f7d590e1691323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144319 Malicious code in less-loader-dotenv-parse-variables-ophiuchus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a1bbe9db986faf6cdb9d446f73fd84d8df8a0b68709c7614f3344107d666f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142638 Malicious code in fornax-miranda-dotenv-parse-variables-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5daaca5d8d981787420bdbbc174f4e8024aff81ca636c0c7c87a2a68d4f315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149619 Malicious code in xanthus-build-development-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a806dd95a5e6b3269527ab019eececbf5dbde8ce953c2f0a04ea6db7460bb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141541 Malicious code in deneb-delphinus-orbit-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9301b363189b8f48650bbbbd3a8d085265435738bf77651aa5ddaec801cf1724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141159 Malicious code in corvus-luna-chromedriver-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc57845ad897dab7e51dc698f8f4a85f4640e5b4759380e4673f476f8d7a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147773 Malicious code in sedna-leda-virgo-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678811bc3418cea8107e8a9fe3f77efb20d7b071be856ea9696257f6c00d563a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...