MAL-2025-147552 Malicious code in run-script-testcafe-astro-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7916e8a378d8990513632bf657bae538eb3be1e67bd7c5848e1e1e906953cb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148901 Malicious code in ultra-nightwatch-commitizen-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba7ef101351f596629e0364d0b2222171328d574d9ce623ad8780380fb406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-leda-proxima-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f32da684de609279916e0b8a7a1c9f1f821ba4d68df15eb3d0acbe9e68dab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-socketio-jupiter-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef5d5abb2d508516bf2f8ac1a140559e9dc5f585e2b79eafe1e8f3443117745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149403 Malicious code in webpack-postgres-draco-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765202ad2c860e75154b78975f19a9173bd6a6acf4f554a2f5f02825a71f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147544 Malicious code in run-script-got-cross-env-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff9bfacb88160eb86cdff05b33e80ccc35019431641ff471b088dbeb4ff399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146985 Malicious code in query-wezen-ophiuchus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963978e738e91b8096361f2d0993dbf63b1c2007be9bf4deedfdc91631600f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140730 Malicious code in charon-polaris-socketio-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765198641ce1b82606fdd938edd1346719d47b28422f609f5126548b170496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148123 Malicious code in spectron-redis-xo-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26507e079d9a939a5ac7f3360656f3c2de560dca7b8b275b5fbca2ede529c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148015 Malicious code in soap-chakra-ui-phenomic-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eaaaac6b3b0e3bcd0e7b75f6b8dba7daf39342f5e4058ccbeaf897eb2a1678e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-query-xanadu-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadd90b72ea87821d2c13a93d120437c6c61285fa9ff825b18799a960481a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-registry-bellatrix-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1a5c501ec3299dcc8dfa9935e0f26ed824255bb5062b9cb5ddfe62fbd4f34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-version-sagitta-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3ad7629526512c8e8094dc1e6a642a0a45b7f8f0b9d35bcec3a523d57cc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-polaris-wolf-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cd593eb7cd0784d0722fc9a9b4d17c974690e19d815b6ecb4f18d1ba7ba392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-playwright-charon-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d23e4681498a17b8540942a340a8b572177655a82088cfdb027d1b5ec94388d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-meissa-config-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bf6f8a6ac69fb91ea2deb9bae6b5c130a16569a091709ebaa8a834a03f251b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-hydra-adonis-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9766e27ad16780af1cc83b26d319905d9c6ffcf233d0efe0840ea32a88799f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-taurus-antd-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc7f09a8172a6f84dff3f36916e21a8732e1de7d29a1a4fa802a450bcc89c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-public-odin-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce472fcd23ac14edaae98c960946771deefffb77efc0bd59c1726b2b080d0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-style-loader-pyxis-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaec0232e4a46f48d132b5c24d990bc8257f4d2882219fe80a1de80736883a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...