MAL-2025-140368 Malicious code in canopus-phoebe-electron-builder-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36eeabd19bdeac8a1ef874d116c625c345e5f293b115ed04241d7f4b9e3d9df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148777 Malicious code in transform-webdriver-mocha-webdriver-mocha-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e5abf93e13670c0204d1213efaf2185a6c74e9b7579971752240918009cebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140447 Malicious code in carpo-kinetic-capella-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36738fd5391a2e0a3836541071bdde4fa6d1a86665a79160d7c8262aec63014d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145041 Malicious code in miranda-less-mensa-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc4e4c231f13e5fecc93bd7ea1c4f26d7f4e00913d6f3b2104cb008a253169e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148178 Malicious code in spica-rocket-css-minimizer-webpack-plugin-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da0c09aa3a47b37c6fa3e23aa49e0f10af52ec0d0925b725afbb6e89ba5d70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140187 Malicious code in build-pino-pretty-frontend-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136bd760b092d361738315dc7ba6e397b79b80fa76ad0d08a50c3c277bd10a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145714 Malicious code in nuxtjs-repository-browserify-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f4787bbbd170be4d0f76478b9c29f56d18d71a9c85eba70f5c44df767291d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149332 Malicious code in webdriver-manager-private-helios-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7081f24b37a858625c177c44edb0282c8634acf916b9c19196988d6877ccb140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143037 Malicious code in gridsome-dependencies-hugo-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cb118dfb512914757607f2581b601773b46370aa44eedf0fd97b506eeb430c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-update-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bb678b1ed3006cc02805d7c02037af3629895bb1fe8d7676c6660427ff21e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-acamar-cypress-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9574053cd71576ee0f80d65ab6fd694f6fcf07821d3526d0442742f118fc9909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-rimraf-figures-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66aae2714021dd118c8ba366f6b6870e5c1419b5ba2ac2523986e777b5c22445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-config-miranda-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2428e49d1c1fa813040f32afcbdb8c8455d25a0b20ba9ebfbd4c1c5e900c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147773 Malicious code in sedna-leda-virgo-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678811bc3418cea8107e8a9fe3f77efb20d7b071be856ea9696257f6c00d563a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-optimize-css-assets-webpack-plugin-callback-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4d26d4873796782551905789c7fd81ed92473600d7d9e682e8a4f349c24e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-europa-chakra-ui-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548c4fad05d7ef5fb506d0b71b1b06f6014ad824859a8f952b80baa268a2410c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luna-phoebe-despina-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecff078b7d6ee9dbb72b33f4db4f7635fa8887e98b1db63f8fcaab39c219a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-octans-metalsmith-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9384bbb9fc0aa0e1f16a71cc9464392c53182e411ef298e21246033a29d53347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-mensa-convict-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf98e15fb2d5e78f0ff9dfdd1110b97f6ba405e1581988e397bf413108df41f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-supervisor-avior-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243e62c7acf1016e1ffe6c9f001183b55d05715539a43a4ed89a371a38e64bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...