MAL-2025-139722 Malicious code in auth-europa-json-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649df122b61a0fefdc081c4cf8993203d642edd844cd95389b1a9160d88043ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149303 Malicious code in wasat-terser-sirius-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56799176c6615904f4c2fa7cf443e635efe39e0b174d0f4a167414ada64497d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139798 Malicious code in await-frontend-duplex-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b1660df20d7f88c2fc37a0a8d4337f54a9d483ee2fc063ac992d6e53df1b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145705 Malicious code in nuxtjs-grus-heka-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aabd30743192b5db4cf889cca1641cc79c387fa9213807598d2977d5bc2769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149379 Malicious code in webdriverio-pino-uninstall-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eca553956144a6de60b33e12b7d4ebf483c39d114fdef6305308ea3dea7c685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146690 Malicious code in protractor-miranda-mensa-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a8cf61132b136b96bfab4a1fa37e312363717bedabfccced7db087db1b0eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141035 Malicious code in config-promise-weywot-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec8c31de4eaa83af600a570d4fbd1f760af8fac9a73751a0902d639cddafa421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142732 Malicious code in fusion-flare-mensa-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cb283c5e1df3af407d2bf58256597fec083f923747006d84c54fb6f2b16d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148144 Malicious code in spectron-webdriver-uglify-js-figures-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8789b9b82d67312a6f4a4b617e59e05f8880864510defc0e5ca8981f30aa0dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dione-nashira-socketio-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0504c890dd345397f6307686fc1027e24d793cb1862f798151d4f440d66c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-corvus-sirius-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fee67acece68dcfece32a0e3209034a208b1d4e721722fb1a87088b70c3792a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-auth0-leda-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ff5904ea8b5f8c969aa7052d1caef7be492c7bb6abe7cb68d1251dddb5d6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-link-backend-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa26e970661dfb370e1a1f47a2210dd68b9872f989fe6114efb9f0564cbe26f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-standard-miranda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d3c30a51abc91b12f482bb8456a6a71fc95345ed667f032cfef13cf02b6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146427 Malicious code in postcss-yaml-lynx-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7991fb1fffadbc9283f03779f51fa19d71c12c033f9ba3a11c26f4941dcd670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144349 Malicious code in levels-bootes-charon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6250de6f7530c83732e5500e5ff0844acc606c31046c38698aa8affb35a28ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140859 Malicious code in colors-phoenix-eslint-config-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e2d78552580aeb2d96be7e24039e24b488659a043cf2e9ade9ba758d552722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139571 Malicious code in arcturus-jabbah-private-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96b8043e59a6d62401783728f39ae721c11121e22aee1c7fe10a37851fb697d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-element-ui-jekyll-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-hexo-subscription-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2105b8bd28c6efe0d62e14f7c0a60d2d3e0e8df12dba421dfdcfa60299bea723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...