MAL-2025-140952 Malicious code in commitlint-antares-chariklo-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b721512cc47a4a37613f305324a66d29cc423e0fbfe0d78155a8aa93f41bd14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144046 Malicious code in juno-zenobia-kinetic-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cda1f7e16474f4db77e1627311d6c2a20cf414dbecf946bfc210bf918669d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141888 Malicious code in elara-rocket-pipe-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ff2f73a968804fa97093b76b356f86a3c51d62f7c7b520c02d5fd837aa8eff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145069 Malicious code in mocha-async-heka-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bdb37c2ee2ed51f3024c7fc8741cc782ab41d3b27b9d29688465a40a61e03c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142879 Malicious code in geckodriver-process-module-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b003134420a4f6d79fd4f63c839be965746e5cf508de21a4f403624f0104e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145876 Malicious code in ora-altair-vega-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f60281db13309d62314a0a9e16f3912bee556a7237b902eeda43ba95885397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147404 Malicious code in reveal-md-celeste-ariel-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8470d16e3096896180d1fdec498c433326fb2287ef760464e34c1c84caeef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-meteor-hydra-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33770dfbac66ffcb26f1980fbf651debce846bbe4d0a6c950d36e990f3ca549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-draco-blaze-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207ef2ba0846e5d36f057c85c4930563d7d0622d6842a09081f634ce315dd2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-xerxes-betelgeuse-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486ffdc34eb6aee276dd8cb1becca10cf998b6e3f73a94f7fde812b72734c913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-europa-janus-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52842dfe4c3d56eaf74f1fe88e00a70823584c27879777c26e497972044f8f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-xanthus-less-loader-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30fd4b247599dd9ba70c60cc7739635c150dbf43b468f570acbaae0ad26e5127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-mocha-start-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8b887874b9898ac0f6e0f183bc4dee8c0d7a569bb6ad9dd7ef8d6ebeefbed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144061 Malicious code in jupiter-prettier-cordelia-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b886be6cfeb6e0619d727153027914278c6a48c657e5309135b6aa4cce85e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148580 Malicious code in test-sagitta-development-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c3ec70cfadd3ba402d121641037ebae16726f0afdba17e4143d9fb794b8635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149378 Malicious code in webdriverio-nightwatch-sequelize-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641664710fffd6ee624b0eb48165494b9d88e2bf41886b18ff51285c84b58123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145119 Malicious code in module-xml-meteor-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ba59caf9664dc3a61a37f877d63dc27690e7dab0c4b69f50b12223c83139ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142540 Malicious code in fomalhaut-ganymede-yildun-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8a7a0c5fcaed29a0f050cad3ab42d3b08497f20cd9f832ae73151d9fb0856f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145582 Malicious code in nodemon-less-gravity-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405ba04f7fdaecd140dfc69f1313e561ea136c3ba12352ca7657e3bf0897080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...