MAL-2025-142707 Malicious code in frontend-magellan-metalsmith-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfaded5a35d94f132a6c8896414ddf1d3d52e9a23f4b571443e2689ecd34e447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142709 Malicious code in frontend-mira-indus-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2f5b74653ef8684794a4ecb5d3a754b2e0b9cf2db7fd5352e3ff15ddce16d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144550 Malicious code in loopback-frontend-prettier-plugin-markdown-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ff5e2656ce3b451ff360f78a67acd91fc9c21a7247fe942f1717f1b59d72de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141388 Malicious code in cygnus-upgrade-frontend-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4efd3889cc38715cfa87373999a9ac8a9bc9757e20af388aa69dd89fa580fa57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111565

Malicious code in loopback-frontend-prettier-plugin-markdown-spectron npm...

Malicious code in pino-pretty-frontend-sqlite-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5637c1e972a444b0b66f8940c38cba7129ec9beaba986b3ea79bf0ca0495491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116304

Malicious code in await-frontend-duplex-html-webpack-plugin npm...

EUVD-2025-112686

Malicious code in husky-quito-electron-frontend npm...

Malicious code in markdown-pdf-frontend-rimraf-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81956f1b9dd174b55f6d0b1296d2a4ae9ca30a4a82a3c848a5a3a4d3c331e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113861

Malicious code in eslint-spinner-websockets-frontend npm...

Malicious code in inquirer-frontend-changelog-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c250a136f5d0990b830b851b42d887b841167f96ed2d9628e6dc86facc74ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-less-loader-mongoose-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f435d0c6225ef989e040df7f6dc37a6312c0b5c425590180a80e65fa144b165d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123689

Malicious code in pino-pretty-frontend-sqlite-hydra npm...

Malicious code in winston-wasat-frontend-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1e87b3b20c2fe6fcc2a57079c6652db190328cca043eca984aa1659c223725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123796

Malicious code in perseus-yakutsk-frontend-gridsome npm...

Malicious code in frontend-proxima-xanthus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170a45435eddbe8938af10061353aa9771fc2daebdae204a5c61d7c5ce5c4ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144691 Malicious code in markdown-pdf-frontend-rimraf-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81956f1b9dd174b55f6d0b1296d2a4ae9ca30a4a82a3c848a5a3a4d3c331e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142704 Malicious code in frontend-hydra-morgan-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b963aa21771fb79afb2a1d90627a8185e9f4f8c71fc8ee3b0bdbd1516edec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149296 Malicious code in wasat-npm-frontend-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ed7cb4dd2e77f6c32dce0cf92384b480709d841e5b7d1d22b7f7ac3f73bedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142716 Malicious code in frontend-quark-antares-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2705edc75fdc673a8224482fad5b553e46f7fcd696e1c16c4557c29c33efa292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...