MAL-2025-144628 Malicious code in magellan-concurrently-markdown-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9abaa4ad316f22936dd5b88b8155e088efef33268c84c604f46a073977c2b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144422 Malicious code in link-sails-promise-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6d1825fa8d2aeed6f1fd7dcad4ee8994ab9e7c7f12f453f35eee3d1a8265ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139732 Malicious code in auth-thuban-despina-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994aae1a5bffc21ac6c1e7d02d8aee1f9f9b02e29f12defd7293fa63c496981c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145761 Malicious code in octans-apollo-google-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f8cf1a29aa8d3f79169df6417c3756d4d86cee205262bb3c9db4961245240b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144300 Malicious code in leda-vega-forever-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705ba1bffe46a977d02c92d5251392b47fa800e7294432d8f3f44f3f5c584c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144338 Malicious code in less-miranda-rocket-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be89cfac1299964287ae5c23da35e42fa60b5f6efa38ee5baffed6a9235ab7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141023 Malicious code in config-galaxy-rimraf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a20b2aacf8190012ddfbab3217df1639b5da0ac41f048534553bde75653cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143996 Malicious code in jsonp-framework-izar-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0734ca78805b9c044c458383ecb8b4c15a2579a261b02200ff4d62a149964f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143718 Malicious code in iota-deneb-quark-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de80cbfc864aedcfd8310d41fddce90d2f3a5fbb40bd00045b7d081887b66bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149480 Malicious code in winston-blaze-convict-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143918 Malicious code in jest-castor-stream-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3868868461930489c674de57569f0da76864293b834ad3f267fc02caa7689083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147803 Malicious code in selenium-hapi-graphql-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe863da11e1bb254e980e820a2b5e550876aaec7d97240823645a418679a9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147484 Malicious code in rocket-ultra-playwright-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4b6491f15f314eec05abd224b0ef96bb4fb0502115124a5cac9421c3fc8f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148823 Malicious code in triton-phoebe-lint-staged-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da62219aeb9b6a9e0c008d8ad616786c15270b713723595780d92d8f0cbd2ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142514 Malicious code in firebase-selenium-fornax-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ca74fc3da3c018a21c302ae9e9cefd4d0ff7b1db8d2b95dba91c29ec2b756e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149580 Malicious code in writable-supervisor-proxima-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bca4faabe3a42840c725348c122be30333d6195344c1bb22420ab73b6bea88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149851 Malicious code in zenith-gacrux-tethys-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7db5be699ef4ba8aeea257073baddc1b5f80270191b531880ceee13acc8a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149886 Malicious code in zephyr-init-json-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26d5c9a0948f2dc24db080d54ba2a69abea1ce865c17def865d8c7a4d11a833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142400 Malicious code in farout-castor-publish-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430c0c3a43774fa4675a64b073047be943c2bc19aa6beb0da328c2142b6c82c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147988 Malicious code in slides-inquirer-delphinus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f99d7fb9432dd30ab8ca0c7996dc80b6510b5ece02616847e2483aaf06702d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...