MAL-2025-144464 Malicious code in lint-staged-pyxis-webdriver-manager-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc50e3aa929a131d682c28618a24b80bb1df55cb791d02ab06ddbfd580f66fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142698 Malicious code in frontend-betelgeuse-restart-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c17901f24ac1ba7bfdb27270525d255471ed4fa9d15e0baad834e186d971a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148989 Malicious code in update-airbnb-dione-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd75e4671ee3cf03a883d7bb91717226977806f05620164ec92500c25a6748d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149264 Malicious code in warp-cassini-bellatrix-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cd229f989d96ae7a463fc05e63b1f0c0148d0becf9594c760d8e6fc3045732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146276 Malicious code in playwright-cli-antares-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62941a3085c080ce17c8f0e51fd2b6b90ebbdbb7d4177709b5c4bdf44692b987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147102 Malicious code in redis-hermes-mocha-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa3503433e49e30054cd2630595517ac5f56481aa4d95e98c70613239f8bdc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140180 Malicious code in buffer-xenon-meissa-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9313b74b72033a3c8808f05235d43db0602376af815210e74dd8bf694f05bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140924 Malicious code in commitizen-await-commitlint-config-angular-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ca5ab4510a606274ae8a004323b0e1abe851ab2bd6248263f9b5647d2de6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149142 Malicious code in version-mongoose-cors-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2279c51867e3bcfa98c896e4759ccbe31ff9fb080811277a35107fc44962b9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143561 Malicious code in indus-child-process-apollo-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 907068498ca83a4f322fa13c07e12119461db1ab2f93983dcb53f18a4a2279a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144081 Malicious code in jwt-nebula-module-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9bff033dd6f4cd1ea320753374935ff75fd394a2a0fbd8a15fcfa1243ddaa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142112 Malicious code in epimetheus-uglify-js-figures-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba4c6c38b08a1edcc6330d629aab361871c08e39409c9f9c85f472c1eb1503f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145228 Malicious code in mutation-phoebe-janus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7c065e012037e306c733ab9782db13b462d8ae1748e1eca093f8516636fda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148694 Malicious code in titan-tailwindcss-koa-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc07afb489f3fefb44ee960e27915b773a85eca1cca9ffa50c5c027d2283e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142185 Malicious code in eris-vuepress-aurora-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79fee7f700347a0df6713b6a5c31af9087e78bf571b35e0dcfdb79460bc8a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146807 Malicious code in publish-prompts-dynamo-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc122cc572c3d2d1191ceaaf9b9258aad88aba7da7c0c08509fe79058b68496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148113 Malicious code in spectron-cordelia-vortex-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924a3c2cbbe1ad8b5c0a087a6b8f6e373b3ed5196ce4c7554c5b23b4d3cc284a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149241 Malicious code in vulcan-janus-winston-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f0e89d949fe4ecbb37529f0a130b7586e12edfe0977ce61c7a40b52aef7c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149477 Malicious code in winston-antd-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abedf822a8547ae8ecf50d68853589a4cc4cb7fbee11665ad0ab235d5085f9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139387 Malicious code in andromeda-xenos-relay-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a0e5979a37668f23e180bde79ead45f1bedefb653cbdb6a846c2c4d8a99c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...