MAL-2025-144916 Malicious code in meteor-iota-xanadu-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575355204cf2d8533897eda0e081bd9259ae4c69d20cf2c31ede843fd5cf5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149321 Malicious code in webdriver-manager-io-betelgeuse-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b7ad259d79486b5eec821e49788722b5bff497f8471dc329e58af138fda0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146655 Malicious code in promise-ursa-testcafe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e74f0fa1c64ea786e96b6603912346725d9b64ad775fcaf397f28f74b1d7420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146331 Malicious code in polaris-cordelia-jekyll-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92770264ec80fb27b4cd47c4c41cf2cc5b9617c694833736cf037433d29e2078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149886 Malicious code in zephyr-init-json-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26d5c9a0948f2dc24db080d54ba2a69abea1ce865c17def865d8c7a4d11a833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146439 Malicious code in postgres-meissa-install-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78e694afa9ed340f715efa6d82a75a2aafd8cd410e334c6974fb4f9d2fb94c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143773 Malicious code in jabbah-cressida-eridanus-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3306fc17cb95846ac5a3a367c5869ade615bfbfdba0131b4a319e8ad4da9df03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142427 Malicious code in farout-tethys-antares-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2bbbaa7d4d1ca36c86f88ecf87f827903ba9ed36af18432cf640cd12251a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148823 Malicious code in triton-phoebe-lint-staged-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da62219aeb9b6a9e0c008d8ad616786c15270b713723595780d92d8f0cbd2ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147278 Malicious code in repository-passport-vortex-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50013f5f24460ec3a298657a62bd80113b5ac1eedbae8ee0ef592afbb0383fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145490 Malicious code in nightwatch-tethys-leda-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019dd35b37b17672306ad7608a87a4b787d5721c1b9dbd1de53c7ac05cb89cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142647 Malicious code in fornax-pulsar-phenomic-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5bd18961a6749b1c841892122d0994deda449769618a1ce0ba23e402e00ed23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141137 Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143269 Malicious code in hercules-andromeda-cors-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0a65517828c759ef112b5679684b76174ea657c94c4adf54cc86b95edbff45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139464 Malicious code in antd-postgres-eleventy-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc23735b38462702c28044f1ca9863adc5a4e093748b364fc45cfe6ff8c2caf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142879 Malicious code in geckodriver-process-module-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b003134420a4f6d79fd4f63c839be965746e5cf508de21a4f403624f0104e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145419 Malicious code in nextjs-nestjs-html-webpack-plugin-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7059d1a15f426a74fcf592bc2bb475317c6e5b874976cc1a75139833e60e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142922 Malicious code in global-andromeda-publish-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a433453620d12b4b3f0344641bc39f39ff46ae0ba73b37754ed2da6e1646f3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149480 Malicious code in winston-blaze-convict-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140952 Malicious code in commitlint-antares-chariklo-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b721512cc47a4a37613f305324a66d29cc423e0fbfe0d78155a8aa93f41bd14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...