MAL-2025-149381 Malicious code in webdriverio-relay-update-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb35cd4a8696fdf25e749474ec557164531cbf2d0d80b09118786fac9cb70fa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149413 Malicious code in webpack-wasat-pyxis-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd09b6ad20379082e0839be824d7f3137181fc436b825bfbfc5b4d34d841fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147338 Malicious code in rest-altair-csrf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d12f9c3117cd64df99f3421c074d81f3494830740d567162b1decb6a9b9850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141732 Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9c03c53a96b3a1aa932f003782deaf85651c39cb3869bece3e210ab9492631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140469 Malicious code in cassini-meissa-neptune-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440a8689e11e8ca58dd101c2d00e557fc2643dd6d830fc6bed117eca5d9690f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149640 Malicious code in xanthus-zephyr-deimos-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ccfe0c43aafca1e1a13e11767e2e20951dec1dda7606e25cc0f63890bde69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144377 Malicious code in library-init-flare-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd269a356ae3f884d25ed3afd367540fa7f952b3a55f8746d6c3a7ab5ef34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141955 Malicious code in elektra-webdriver-mocha-xanadu-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4dc7b351cfdfe332b731cfc5e306c28d94acf928ec0d493c81b06328d944a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-pyxis-inquirer-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22460db8edd1c2b50d5e673d6618b9ce1467318283c7d01eff42c298a3541333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149755 Malicious code in xo-repository-package-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1c1b4e798413ed67d60bf079bd9e72384081d946926bf9522d774979b4dc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146202 Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc91661a591ce06363d9a044e03d074a45545f80c73bb0fa7a69204a4a2561b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141352 Malicious code in csv-ora-relay-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b21441c8f78c5afc7820cf0a2d79eb3499fa1781bc2b779d68a7a46288bf644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143921 Malicious code in jest-electron-leda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afc2c02941b782a02116d029cc9e08d731431e5460f9652b303b188bbed9458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146012 Malicious code in pavo-taurus-miranda-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aac5ead4efc3c11d82c7f4194496e147b4fe85c3b007b970f904232f39c907f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148981 Malicious code in unuk-iota-zenith-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e56bc422e3d5af1f932c29027347816b28ec50423965deddde8abf2c54ce8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148113 Malicious code in spectron-cordelia-vortex-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924a3c2cbbe1ad8b5c0a087a6b8f6e373b3ed5196ce4c7554c5b23b4d3cc284a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147298 Malicious code in request-kronos-elektra-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34120f381757b55e7a773b70ae46151f71974274ab08bcc6382fb88fc45bb9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141724 Malicious code in dotenv-parse-variables-jwt-soap-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ba016402a8e1f026cecd68e7a2e6cd6724f0a32d050b391c7016e08c40022a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141461 Malicious code in dagda-aquarius-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f696dec9028c1ccf5ff7366778658b3df225e2bc8174ac216fa5b5fa5a39e8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141540 Malicious code in deneb-convict-loopback-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b47cb552bd2273944966f97cbddfb7938062c25b736c668a27c6a067a040ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...