MAL-2025-146166 Malicious code in phoebe-oauth-blitz-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2c729a4cb488df8cae036da08e103306bdad34795f865fc600c0f099b12065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146773 Malicious code in publish-alphard-css-minimizer-webpack-plugin-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df07588139af13f8b920c87e78bacd917d9829ec1b3565249015c0dfdec6d5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144662 Malicious code in magellan-sedna-mysql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b65804b6bb09003a5cc8c885d0d244a90568ca367173e330cce79e3d3433c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145291 Malicious code in native-oauth-fork-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc0a76c49b1d70b7ecaa8be3efcd35bff4e3da8c178acfd5c0d01ea58834e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148248 Malicious code in standard-aquarius-css-loader-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec05f0a48a6171709e472121b4da1b9b84e2fb0444facebb8acd27d908e38b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149336 Malicious code in webdriver-manager-titan-mini-css-extract-plugin-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252329e0187808c28119ff30a18d84ca1b02e0623e26bdfd8eefcb8d3830c61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145382 Malicious code in neptune-stream-toml-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ecdbed3d1f61979e80b7310790181fbfae8d2f3d11f3eea7493acce573c6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143584 Malicious code in ini-cors-barnard-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2cbda5aa5bcfa99f8e036189f7f3635a8859e8ef4ed100ba4246a9e3d258aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139495 Malicious code in apollo-backend-callback-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b029e2ff0253adb366a1851b7917fab7d2ea68fc0c4fcdae60e82ac11e422ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147436 Malicious code in rigel-module-ariel-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5430b6080ec3b26d7c4d27ebfc869276db25cfcba262c4909bdcdd3fc72261c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141540 Malicious code in deneb-convict-loopback-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b47cb552bd2273944966f97cbddfb7938062c25b736c668a27c6a067a040ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141461 Malicious code in dagda-aquarius-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f696dec9028c1ccf5ff7366778658b3df225e2bc8174ac216fa5b5fa5a39e8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-phenomic-halley-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f4c4745595afb482f0dc6515e23f1516a7bd488d331f920fa0c70fa7021f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-adonis-quasar-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007b2f11f8fdda0da7633f2f576840f23f5d98ec7af1de960701ee7d69088ea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141589 Malicious code in dependencies-wasat-eslint-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156cd86e2d601b460757239dcc8be2e53759330ea90b0ff0ebce92acaa767702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148154 Malicious code in spica-ceres-semantic-release-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94907f605263e00cb2d997529dfc2248d32cb9f5aa066cd46b1869ed5c1b64f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143647 Malicious code in inquirer-frontend-changelog-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c250a136f5d0990b830b851b42d887b841167f96ed2d9628e6dc86facc74ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-nuxtjs-procyon-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b925d25988baf7e067d0e986f7a02f01e3109348b252ff402f07ac839ce6c6cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-xenos-command-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec3c3ef11e14e50a517e63caa9aca355427c437df4d625dc2d40a9c70a4b22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-umbriel-tailwindcss-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b504ad2784be5eabf4f348d8bacc2bca3fca7f160530f9e1132f55d1142e1d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...