MAL-2025-147360 Malicious code in rest-pegasus-miranda-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a609dd6810e3c9556153e9e509d555cd3ff54164dbb8152df6a11c449aa87c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142059 Malicious code in enif-quito-spectron-webdriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ab05c0abe59e44166b054374c43449336ba83fe938e39d8214b4c678b52ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143417 Malicious code in husky-fork-child-process-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c28ab319aa31277e720caa8ff1e8f5df6fae0d7de9751935ac84c658e0c026b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144249 Malicious code in lacerta-optimize-css-assets-webpack-plugin-unuk-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c13c9ad8a827a0a466f60482bd8a6551b5d9521b8c924baa9dca6a48e9363c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147227 Malicious code in release-it-nightwatch-jekyll-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5796729233de51edc8c296497cfcabae7b685d63f4f1c6a8c094d2ab4513ade2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143889 Malicious code in javascript-readable-fetch-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3827cbbd47b302e1ef59e4c94ec650165f357e5bbd37b488b09940b80b763a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144240 Malicious code in lacerta-geckodriver-tool-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8ae917a5908e869976d6341f9b536915f6556c4e5f81dbad2c4dcd8bb32526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148688 Malicious code in titan-node-config-janus-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3953560bbf546385e3116d1295a495a96bf128ad40a003706fa0d5cb2c8a6d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142002 Malicious code in eleventy-lacerta-private-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee64091f763f6cd601e7470176a085b208a5ed98f1bf424ab4613c439eb7d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144339 Malicious code in less-mocha-slides-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb08e378fd5b37897cb55692109f14c77a0d01eb08201a44b838e117a48f037c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141108 Malicious code in cordelia-protractor-csrf-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c24419253cec7c8e17b9a14f16c69c46e113f822774ab82772c739370114dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148215 Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57f12b0aed49526cc22a4e24142b150f9198614c3bae415e2ce627c100aff41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141004 Malicious code in concurrently-deimos-scorpius-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417930b3a430052e342e5f69a99cbf6ba77c60440316b9ce057c1d09105f7c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139307 Malicious code in algol-rollup-uninstall-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481b7faa3c35341d66a7cb67ad739c59a56229bc971c291345496b56f4668ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-europa-nightwatch-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9e2d01687c452abaa9d67f408966b0e56859a823032067640283f0dfc7bf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-celeste-release-it-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df8c6940e6e3d9ced5f326a094eb0c4ed187281f9a643fd72117c93e7dbf29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-json-pino-pretty-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea561973f942ff04defd609f3fb52d9c8621f6f6b7699c398f4edb048fb22bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-postcss-init-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-webdriver-manager-colors-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7046db12c93f852d9af106f281fac38327ff8b7cf8e3aa505fcd91ccefda5b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-style-loader-sqlite-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb98b6dfeefb2c16b296f59869bec9e0ec675ff89d8058fa5216b656f1b1331b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...