MAL-2025-141709 Malicious code in dotenv-parse-variables-axios-rimraf-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74e83a98501868b14b36dc23df3d406f687182616811541cd1317ec9c0d1129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148409 Malicious code in supervisor-zenith-ganymede-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a90b156b9a8819e787140ca064ef027ec6699605edd77ecf43ee17d3936bcf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149579 Malicious code in writable-polaris-dione-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05826b8e32c743603a0d3f4ae2d677f477afbd9da56884ba64e9c43b78e236a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142383 Malicious code in express-meteor-colors-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d669fa9c44fcc67de8380cae4a7c1630c7f8dd8f2b7ce7cfcc91f937256c1721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145056 Malicious code in miranda-rigel-webdriver-manager-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bdc0dfd44e9ef24f1f26a65a9dde8fe116137932c6a13652c8544024480f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147139 Malicious code in regulus-apex-package-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59a05a19349911216fdb272750a19dba669a24491c9ff6994f3988897384906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146957 Malicious code in quasar-query-mongoose-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5788a81fa1f290385db35fb12fe9885e283c9069d337479ea30915f15012fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144039 Malicious code in juno-style-loader-sedna-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb1edc4673f0ed82d4bb87c438df25a1a79f430859c6849eac0dc14a34c4644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147519 Malicious code in rollup-plugin-sagitta-css-minimizer-webpack-plugin-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c8f5b34fb3f7d597c860a1710f27f46ff907e13fbe49cd8c36c11f156f9d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142632 Malicious code in fornax-loopback-google-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453791ccec0e6d9af3bb03731b15537c00689db44a6584eef16befedb6d447c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147811 Malicious code in selenium-relay-nashira-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431b7e15efb9c3f0cf9e13dc4183e0b68c73965cdcf71243a54a558c44da98c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143089 Malicious code in grus-child-process-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b28413cef90aca4f8fabcb9fcb9cc4c3737e32a1247520c569f1d849bef559a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143670 Malicious code in install-build-readable-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03e847818678280e92c3c6e82daa26f0b7e22d0fe3afb9b4d2a96f20cb04908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140362 Malicious code in canopus-kronos-arcturus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e4d96be919d586b8b15710cbae4a8827d448f68bc93f2af7fdbd94ccc46b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144067 Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2af6812199247ede8e24f95898a6078f72f1f090e8bf50ecf30c6f91ca063d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140323 Malicious code in callback-webpack-halley-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a248511661d42b7e8a90d6b53620f06f00b4b181ee0d2c135f7ace1fe1b691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143144 Malicious code in halley-grunt-firebase-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145275 Malicious code in nashira-flare-rollup-plugin-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389955c74cc9198f061797975cca0e77d5d47037a30efead28653746348f6c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147045 Malicious code in rate-limiter-ophiuchus-cluster-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef2e42187265b736b0de40047125658f11cf7cd3428bcaef718759b23c7991b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149091 Malicious code in vega-io-prettier-stylelint-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdba254f331a198ad29d4f9ac5c0b302bbe4413db07312639d2a4882d8bc2c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...