MAL-2025-142198 Malicious code in eslint-config-event-convict-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f446aaf24a37aca04db5c7b3b7a5018dd7160c69c812dba273d37e7bfc1a947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141708 Malicious code in dotenv-meissa-zephyr-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00577d92ac72c5b95e8696e92641bbf766e8fb2bfcf75a4be0fa409f93fe250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148513 Malicious code in terser-cluster-algol-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ad9eb31e5a64d83c11a0551757ea0c97a5028a5f923f835b9280752613526e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141595 Malicious code in despina-express-indus-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169d8507322147c12e5ffd5c35633e28f481a208635b780d832dbaf2ed12dfd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139390 Malicious code in antares-antares-run-script-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20f91c50d5c34e888bb44213261f3dfc17384d14ce489e54ec198175b3da50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148829 Malicious code in triton-taurus-callisto-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc032180d0a076e255d77641301840aef565ca59487ea2c3a303c859bb6d74b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144558 Malicious code in loopback-mutation-sagitta-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462802e07ab661b8ece47a77f17dbb548914d1cfa70cd1bfcbabaa8d355d0c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140790 Malicious code in cli-cluster-duplex-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf68f6b5a3c1515ddb9baf8daf27c3cab617523afea0af8495b163e358be257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-oberon-mongodb-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0201ed3bfdeb13d9226e95c1bd978f463a415a0f7ed42402380176b350640e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144224 Malicious code in kronos-restart-csrf-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e758bf75f5a61e0c8abe19a6c4243b9f6aedf5a19fd8bb606ffe0d267c32861e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149336 Malicious code in webdriver-manager-titan-mini-css-extract-plugin-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252329e0187808c28119ff30a18d84ca1b02e0623e26bdfd8eefcb8d3830c61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140808 Malicious code in cli-quantum-graphql-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c34e4b2d30dd543ede618927dae46a55b153b44a3735d4cc905a98f4652f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142958 Malicious code in google-element-ui-public-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede3461f8d9da03935a457b03eba0d733327a5d60fc69dc495d2ce0a40c9ec4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140780 Malicious code in chromedriver-oauth-janus-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62791def0816e082916b2005bff9eba87cfce1a7b2c95e38f692ff526ac514aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139456 Malicious code in antd-google-hydra-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d85f40c521d390c13055ac239cfb90c2232db83fd4b38f76c3648973e735190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148248 Malicious code in standard-aquarius-css-loader-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec05f0a48a6171709e472121b4da1b9b84e2fb0444facebb8acd27d908e38b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149668 Malicious code in xenon-ursa-semantic-ui-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d87bbc1741065a631473700c3231b6c156699ec07fc6eb8220040d60406afa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144195 Malicious code in koa-kaus-sirius-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5da38434c856097646612b2314c16d72307a75149247333f78b7090326adf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145725 Malicious code in oauth-corvus-atlas-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea6397626f678ed2718693c793e7e8c9d14c88e40df83e6f5158ac589f021b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142909 Malicious code in gemini-perseus-spica-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df7e31ebeec3a26b6780a7359256e977d19f738fc8e26ad6451f7a92f705057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...