MAL-2025-139893 Malicious code in backend-oberon-gulp-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f226d67cb720d14461d910199eaa5027444b1d55a2845ec76a5fe3ea4ffaefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139195 Malicious code in achernar-draco-redis-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6bbb2ee0d463c7b05d8868a246ea77058a8af3bcc73db7f0edd475dd843324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148828 Malicious code in triton-sirius-redis-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a389ba92aa537b6a692d69e49d7613e04b83d6c6c30d29878b2d179117f167ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142961 Malicious code in google-inquirer-hapi-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7be58eb29f37467c3b6cb8c68a63f2c4c96a8058f7dfe17628c5e644ec52db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140038 Malicious code in blitz-cosmiconfig-google-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde950127da342b2375027506ab6050f96edbff872c390936286f2f3ee67fa03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140279 Malicious code in cache-ophiuchus-nova-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1827e4b1a2cef90d66573f8c0f5a5764e5a0bd9632f912afff6cbc89f26e098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145325 Malicious code in nconf-prettier-jekyll-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1193615f9567405da1dc0cc9bbb83540714d24ef80292fff0db89a9eeb5db08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149416 Malicious code in websockets-auriga-aether-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f82e60419a165c24112425c2a0eb8ff0de0e758fea71c85f94dc4322948d01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147800 Malicious code in selenium-changelog-cygnus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e61e6b3c79918629a831b886044c747112191f4f98adc035a01d44f116970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146054 Malicious code in pegasus-spectron-webdriver-neptune-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfd834cc94f3d97018894b7ada929dcb9499b32c25a4f8e6c33026068697ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145508 Malicious code in node-config-gatsby-terser-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514c4395cec647ca12feacfcacdd7e1eb406be1f56351267a9f1f798a8f10ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141966 Malicious code in element-ui-eslint-config-public-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d99fba2f44200f3296285a80e418e2f25948a481617833ae4387d2e340e260c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147578 Malicious code in sadr-upgrade-airbnb-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc82bd40d74505d643d24b7f73aa5b7ecceb707e680b6eaf31a2fecd6cda9766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146265 Malicious code in pipe-phenomic-zenith-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3484da591110f315d8c1e498f215420eaa5191a3c0274c31ef6498f72a4d239a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144440 Malicious code in lint-ini-carpo-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710073126339c59eb7484057356e51e3da9dc45a7611ec43e102dada5d735dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140274 Malicious code in cache-jekyll-pavo-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b711485d592350a6a83a3dabdc407a543fc87d03c86434e29a65601f32010d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147555 Malicious code in run-script-vuepress-bootes-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f92fcb02abdf3ddd958606e6a604959cbd6e8afde1cec02a001c1694099bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143236 Malicious code in helios-nightwatch-pavo-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5dbf7cc4320130279ec9c0342d1b90cf3d0f3fd5e78d3f5f959952f9f5ccf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148190 Malicious code in spinner-dagda-xml-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0290c84ba80b9e759f0e940702c39f74b6b346365cbb80b29af041a06932ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145293 Malicious code in native-puppeteer-sagitta-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc702e7575891810cd4a5ab2a9525d3febdae7b77ac6c98e96db321068d74f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...