MAL-2025-143721 Malicious code in iota-dotenv-safe-webdriver-mocha-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d7e968a0295c0187fef5d43373097ab9585a396b4ff347bbfdd5347a05b365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144929 Malicious code in meteor-readable-norma-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb19a6b6f3257cbf23fa4c3e5f704404b50b398684ae6901bbfae055b308a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148623 Malicious code in tethys-mira-csv-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92e07edfec104f27c0d5def85f67861f7dd01686a1fd7615be4a2fb1db864c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143708 Malicious code in io-version-spinner-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcca631af9bd1225bc2295e4972bb17157ec73006cf5109fdfcbc42aad6da17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145643 Malicious code in norma-html-webpack-plugin-version-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84509b5d35b1df7faaa56be4c99f921048932e5586fbdebf4d72f7c87eb39467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144584 Malicious code in luna-start-prettier-stylelint-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36b0e4f7b57545761987514b8adc6f3738abe536c5fc6500cc9826bb2af1d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143105 Malicious code in grus-typeorm-koa-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec8ddf276ff22a8a0a69f94799d92ef10703075a6b5070301b7b59216223214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146645 Malicious code in promise-nuxtjs-umbra-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6747916a43b67afac536aee936f618012365ded1a68c4b06f03465d4eca2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139208 Malicious code in adonis-astro-phoenix-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7e99fb4afc14e990840dc9e2341543154aa3e7af41df224312dc7a2bbf330e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145383 Malicious code in neptune-test-jest-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad12d88a9ef4fa5d1ba411a5bbf157a43c53931bf1c5eca24e0a51a56eb7b65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148377 Malicious code in superagent-cors-vuetify-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489811e779c7cd64f6303eb95d751c360fc9c8e8cf5ae73a590f8d2d0cd773a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145541 Malicious code in node-sass-geckodriver-colors-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b1ee4a9c3a715364f26c25e7eb1c0eaff93c630929b0eb42fffe4956558882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142972 Malicious code in google-typeorm-public-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe46e17bb922cf6b54c730f90d58ae9d373c147fc77bc4648addb1455e4fa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141170 Malicious code in corvus-wezen-airbnb-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6625e439e124c01a9f05e73f792b5c19bce9c32a4010cc52be079d4af8f503ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148954 Malicious code in uninstall-browserify-ganymede-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c594a31604f024f8d32acd97ac45463d4c8b693476d16c921f97de33a3e73381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142562 Malicious code in forever-await-despina-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad594bf67a4452e66ab3a9c84a402cce3949517c17403eeb0fe086d90559c21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139674 Malicious code in auriga-carina-iota-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ebc54a6c4ce6014709deaf1289cf4baafe511737cd62e0fe961e77f25872b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144362 Malicious code in levels-slides-build-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8543e56fca41cf3dcb13c8ac2ec0d8d25c903a3e0f9631e4a714703b371323a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146107 Malicious code in perseus-procyon-helmet-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0704d4e192cf4d42193c7b8db4484f4d13f416e37a0dd024afa08df4ee3a6d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141882 Malicious code in elara-lint-staged-ophiuchus-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4180b3d9352375faa315af8236199eb89f663c50c6afcf94bff07651b4f2b44e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...