MAL-2025-149017 Malicious code in upgrade-hydra-pipe-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e18cb32f9743ad0393c9b37380bc6d659a698bcfa50db24fb1611874cfe712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140487 Malicious code in castor-leda-init-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1e61eb88822973087b0503c6c945e9cff5c7871fd776b41eeb9b423b647460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147396 Malicious code in restart-style-loader-farout-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4acb30839fa2bf4533553ea8036a3328332f701c3536ff9d79c3f553ab5826e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143413 Malicious code in husky-cli-axios-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e3ac914740a1f8e6ac85c3136819adc22fbba0178c57d910ad1afc930d0768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143569 Malicious code in indus-mini-css-extract-plugin-mysql-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a86d37654c305f1ca7d6d2332f990117367cfff2ea43380f8079134bdd6b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146843 Malicious code in pulsar-repository-uglify-js-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad346edfd4edd2e29551090c05102d6a12d79b3fab9648346b880d2e34714ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143489 Malicious code in hyperion-morgan-start-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8a1f833731723eab33bb2157f6dd3737d4498b61a94a6d4279c80dd713bf0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142137 Malicious code in equinox-terser-webpack-plugin-dione-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5d0a52fb179fed091ca0bfd6b0a8636b4182eb536376574927473e64771fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146807 Malicious code in publish-prompts-dynamo-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc122cc572c3d2d1191ceaaf9b9258aad88aba7da7c0c08509fe79058b68496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144651 Malicious code in magellan-mocha-xerxes-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b63294d000d30fd93c62bd4265da24ed90adff3b46b2ace50227e664925449b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139734 Malicious code in auth-yaml-slides-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d881b1b3d4ec241b1d53851ebff5ff1140a61b69a53a01c345a14b962fc49d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145345 Malicious code in nebula-janus-parcel-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dc02b3853dcb408378255697f28364b8450c949b8e88a32ddda404c5b41fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146739 Malicious code in proxima-sirius-sirius-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b141ae41b6f4e29535c0acaa3fc6a2ee6123053d855ff572721b1822a26452be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141915 Malicious code in electron-fork-mira-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cfca6cb2c335fe1f49ef9979402387599d2e54f4a5c4a3ffdaf8a61f577746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144391 Malicious code in library-transport-iota-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2344ee38fa070a53a841bad9565ace23b620ee3a3f80a0565f958d36b582ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146096 Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf8a0f3e47fb0a4d035bbab3e87f2d08c738bc482b0680f20049920a2b45498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149477 Malicious code in winston-antd-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abedf822a8547ae8ecf50d68853589a4cc4cb7fbee11665ad0ab235d5085f9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144155 Malicious code in kaus-socketio-blaze-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271214cea16cd84986d48c937872fb750393b1a48276a7270a1c97950bf70f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142880 Malicious code in geckodriver-rate-limiter-iota-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acfac2b63c901e11f2748993f0cd58e414c2c64166bbee7ca83b707018519d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144115 Malicious code in karma-phenomic-standard-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e33101a4daa0982432ad2fd50dddbb6bf3d524f23b9ef2235151a69c67e0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...