MAL-2025-141261 Malicious code in cross-env-nodemon-sedna-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7316b299b527b2a7aca15f930a3fdfb9a75ba8c6418bd1cf9278ef08797cd08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140825 Malicious code in cluster-elara-eclipse-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048347085c1a35d570cef25eada38c7e80fdabf3e21687fae65165bcf3933e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148416 Malicious code in sync-build-koa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6cdd7c52d023e5b645b46311ddd666abaadf7439293f946d76fb73259ebc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141008 Malicious code in concurrently-koa-jupiter-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c406a48340215dfc297931ea310432a4f8af4887c0ac52bb24dc2a6d0c56388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144399 Malicious code in link-babel-rehype-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e06c6128285df382318c7cbfc0ab35b0ede2d70825130103f6a655c3d8ab296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141512 Malicious code in delphinus-auriga-helios-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bce6aef65b047690f12ec284b604cd35af45717c4af859051fd00bb4939858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139765 Malicious code in avior-dependencies-radiant-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39db691166389af7eb41e33b34e652b4a60d102ea2c9b17977299e7f021f730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149372 Malicious code in webdriverio-indus-puppeteer-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c0e3f43d11407c4967436f5bdad502a49fa32569364004308ad2437a3c249e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141805 Malicious code in duplex-config-capella-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02bc3281086614c8cd6b45aa58e9e18acba38bf7938917b5b04ec3f943b11f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143014 Malicious code in graphql-webdriverio-husky-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5148b0a76281c79123cbe77e4c2e9157b06d62345dc817344997543ac5c6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141533 Malicious code in deneb-betelgeuse-prettier-stylelint-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69150f9f33731a4330152efa49e47de700c1bd6c725073e76a1854194a83675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144836 Malicious code in meissa-superagent-nuxtjs-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de55d40cec053feab657e806de32600c5da394aa913402b5aeeafd0c320485f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149873 Malicious code in zenobia-sails-chariklo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd4814d994186a5660f22e03e2f758cbfca20ba3b3dd80dd97a01dac7ca3a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146154 Malicious code in phoebe-jasmine-betelgeuse-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868bd2cfd9d3ae551d1149b5c520a17d12b7cd3419667f53c2c09909b9312d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145246 Malicious code in mysql-firebase-websockets-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658595abdf701a1efbf2d67916d95653b525ecf14cbc26919e962c9b88b76554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144726 Malicious code in markdownlint-procyon-magellan-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3737458ecbcf5f4a72d484af71c52ba0eee6232f96af3f035d50de5dddbca906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144862 Malicious code in mensa-readable-nuxtjs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996539962812e89f55620996e24305e3dcbcd5363dcbbfa86f32540a8183ba45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144107 Malicious code in karma-galaxy-proxima-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9112f00b5571a200feea2b0e349052f65ea550e990ee66858706ef898b5833c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139739 Malicious code in auth0-betelgeuse-phoebe-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954a27b30c79b494f8bac523fb12cfefbcc5d58ba134a3f342680d5e53619d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145889 Malicious code in ora-markdown-janus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b7bd4b1c1d39a7f7495b0a9cf4b4e469251a3c28e38498d153c59c70b92a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...