MAL-2025-148204 Malicious code in spinner-node-config-sync-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c53e550c282796bdb8410e7fc43c015ffa0b924311c3921e6542818028eee58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140112 Malicious code in bootstrap-leda-selenium-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e650671be0ef8bac882b4e76b16496a2ea7e4b69e60ff77dbd599a4079f7d705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140404 Malicious code in carina-arcturus-standard-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c10183cf84896c7d9f2edd5f2d4d004e85cfa98549b914581cb501bce5a158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149188 Malicious code in vortex-pino-pretty-gacrux-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac5f7ea82874ddd50989e85c63def24eb8c9cd48b756f20d19912ecea3f5bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149351 Malicious code in webdriver-mocha-karma-update-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29bddb72d46e0eb04cbaf74461bb466c971d87260276a1c84b209ee816d76b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146181 Malicious code in phoebe-sequelize-meissa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06e8e9f443fc6dbd135e27fdb0b50e6a3afc24eae0e4dca9d29dfd7357003b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146930 Malicious code in quark-nodemon-geckodriver-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4884a9d6ee83a9f636acd3035fea7547cffc09b81ff94b654ea8905ae27113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147283 Malicious code in repository-transport-delphinus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0fdc46c42635553bfca3774fe744b2f18d608d3c3168032ef8cc6d1e097991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140379 Malicious code in capella-axios-build-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de1782855692574879b52f874525f81e799648d8226dcd053e2552dc17fcfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143331 Malicious code in hermes-webdriver-manager-atlas-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db68c78a636534602b31a1aab16daef84d3d2b32947a76810a94b4633a78a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143768 Malicious code in jabbah-aether-heka-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be60625e4315cdb6c9c73d8ac61b43d26e1c358e30d28b381c9ce97b78e7a6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149734 Malicious code in xml-relay-jupiter-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20d6a9cc34ca95f2b1723710465fc3398f80bd0aa4f0419a2f86ed70baae5e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142863 Malicious code in geckodriver-dependencies-ursa-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143785 Malicious code in jabbah-nuxtjs-spica-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c6404a455bb29d3f9893290050e6e8982e6a5dbc7c9429a4f25827345da287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140185 Malicious code in build-loopback-transform-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924ddf85d741db918c5a6d6ebd1936d82c9d9258cac2248b333c3e1ff227ed44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147162 Malicious code in rehype-auriga-google-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673cbf0729106f6a375f1483305e9e1799186f99e4954e4f043d47daf81b8445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147505 Malicious code in rollup-nova-inquirer-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f33f361a42c5d6ef8fae97296eb72132192a355ff8bbb783c6031b36c63d437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149863 Malicious code in zenobia-bellatrix-gravity-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c29f1918a6f636e7b6bd048f770510b7604e2b3c0b585ce4537f242137fda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139286 Malicious code in aldebaran-rimraf-meissa-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa7d38098563bac4976b9449698657edc1056f58345ec7c9d7025e56c0ecf79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-ophiuchus-promise-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c187d34c2d44192758f3a3912218065e845cf8db834b7b605521524885b719aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...