MAL-2025-140086 Malicious code in bootes-npm-nightwatch-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ac99d493dc23e9056d3b5d36fa33e25f6df4dfcb9698aaa30abbbb5a315d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-docusaurus-mdx-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec391661dae987beab474a5c6896851afb310bcc2fb8753cf7ff547dbdc624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-barnard-tethys-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3e6e2cbdfce1f99dac07c16e06635150adaf3cacb4524c51c4c46c8ab07e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142860 Malicious code in geckodriver-chai-hyperion-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79d495abb6c1e5b082bab2c49a939c1066d9169d018a55eca80c287333b651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147067 Malicious code in react-bootstrap-mongodb-phenomic-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a578d2d7e5537e4e062495c0e294002661cc51aeafcd9ea38025413e2c2c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143870 Malicious code in jasmine-ultra-magellan-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc63d7a877be1b31e23320b8331884aba215edc7b967e6bda66e1813e04d2b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146485 Malicious code in prettier-plugin-markdown-hyperion-xo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae3a09c4166cbe887283171af6a1441547a9f112d8b65ee4c1dd48fd5365250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148253 Malicious code in standard-electron-algol-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefdcbff234b32eaa809ef06910becc75ac6bd245a7a811a8ceb9c68df4b7ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142342 Malicious code in exec-gravity-async-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0ba8537711e36b7af5ff37c1ab3ce3dab407117c7673478eaa700d75c5296b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144246 Malicious code in lacerta-magellan-sagitta-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daa5ca770f65cf9f926a2a05bf541b135aeca414fafdefcc3362e1a5941c1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142325 Malicious code in event-spica-gridsome-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f0c6290eac850e1d6c4cb0fc81023c3fbee17e9f5b5395d1c16f9dc4ec4e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147750 Malicious code in scripts-typeorm-thuban-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6e15df4cd79df23ccd9ae42ccecd2f2aef0d2b69870cd77e6eac3904be8888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147199 Malicious code in relay-cors-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9749ec9054bca0d033b67273f121b943ff34485eec11b3bab1c3b3fd501e8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139667 Malicious code in atlas-virgo-mui-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce18b52cd687aca9cc61151548e7c77706281e6cc27adce28056eb1378cde57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142728 Malicious code in fusion-cygnus-scripts-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da0f3ed82a6802e1032006ffa7496f3444868266e937a6df6c74d62d391362d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147444 Malicious code in rimraf-auth0-style-loader-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63113711f441b7dfc1f3e59d618a2408c9b5ac7a3aa57122ecdcb81c93c39353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144828 Malicious code in meissa-prettier-plugin-markdown-celeste-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8487cd6f918d907b2e090c92c6b040fb136aa96869c210a9ed51a5530e1c979b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143646 Malicious code in inquirer-duplex-process-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915e7cbf95b48a2c8efed1a02fed0f77e49a42ae939fae8791389eff9a7ab0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142661 Malicious code in fornax-webpack-pyxis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994acb7375c148cf98fd41c7d4000a60a96427b65948c9d9840bf97226b652b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143912 Malicious code in jekyll-proxima-titan-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13822966aac60c094ab317b15fa84b4d2b18ba3bd5b5e0dc25f8a04eab222a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...