MAL-2025-147424 Malicious code in reveal-md-proxima-changelog-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d200af1f64920b8c171bd01b24260d2f9d7eb2b319c8b640d116462512d5570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140695 Malicious code in chariklo-dorado-ganymede-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84db3f327225b1c944bb3fadcbb5ecafcfe89a049123bfc6afb6d2351171f212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-envconfig-regulus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3094685581e8535286d53ba4a65d093b12a027d9f305edb393fc8e9a267df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-helmet-zenith-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029323854f25d0b890fc15cdfed960fa871990c4eeb799297344b79d60c6b465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-link-backend-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa26e970661dfb370e1a1f47a2210dd68b9872f989fe6114efb9f0564cbe26f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-transport-iota-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2344ee38fa070a53a841bad9565ace23b620ee3a3f80a0565f958d36b582ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-antares-bulma-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a195dc12e34bcddfd2b5e36d9a5c748024e53f940af3a3b5ec6ee8f472a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-dotenv-parse-variables-hermes-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6721a07f0aa63d30da176b4c3573e64f3b5986a4ed416aa41fa6596c124b83c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-sagitta-forever-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5266316882adf444b57e1705002258aa5f6cd64e504264dbcb91c1ad0ffb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141418 Malicious code in cz-conventional-changelog-eslint-config-server-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3969b8ec88d2889697f34d76d21306f4eccf27e7802b4fe056dc0fd3bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141071 Malicious code in convict-cypress-lacerta-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9760f23e4293d7c57730048e52da340abf6c34e4763dd063f1121ace07245cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146378 Malicious code in postcss-airbnb-query-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8a326112cffbdc78e4226c40385297d39c2cc350524c8450de4b31660a6a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143273 Malicious code in hercules-betelgeuse-sedna-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0354e17aa89bffa3a61710de4ba9b207eae50022fc471bfbd26d1fadbb833df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142288 Malicious code in europa-protractor-readable-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa112931e43f24bbfdf4a2b84e975c5dc4fb7573e88503849b1ec74e6da0a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149779 Malicious code in yakutsk-resolvers-phoebe-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f5fdc72d93b4fd8896a336557775e4a55ac8cfcce0a6c6bb257314f79673ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140805 Malicious code in cli-norma-celeste-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1f52e88080d69c6d9183e4069ddcd50e96fdbe3fa96898b78f3491dc2649e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148811 Malicious code in triton-convict-yakutsk-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f99bee151fa91ba2c17b175ce75ed36f645a5184e29cc11dfd1aa77a8199ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141043 Malicious code in config-wezen-nightmare-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f411fe3942ef410ebe4f961f8f7bff70042805c1bd5079c6d8b2122db7e44cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146648 Malicious code in promise-rimraf-supervisor-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59479e17cbe88afc81a1c8a65d70256bb17e84aa6391bdafb3acfc2ccd62424d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141474 Malicious code in dagda-jabbah-xenos-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678aea84d3e17daf26a71a1227863e69cfc430bb5d394a840da880b8ae787a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...