MAL-2025-144123 Malicious code in karma-websockets-kastra-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a2f825d9a99d499cfee3bdc98a762a5ce61eaad687a5bb11c1f762337ea5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141036 Malicious code in config-proxima-duplex-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0d5e9cb5983b4c6c0b159ad8e6bd1605cfbb77d5568ccef57bc450516295bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139490 Malicious code in apollo-acamar-babel-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975bae18c661d9351a0e2be74691280b2dad94cb2b2d07b16b53da063e929ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139332 Malicious code in alphard-nightwatch-reveal-md-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd303c31ae8b9f078b3aedcbab70c6fc87a4769bc8241a23fb7d2f72cc6648d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146577 Malicious code in procyon-atlas-jest-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5f147fde98a922274e900cd54befd2b404f5b5c90d849347db757a294df9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143721 Malicious code in iota-dotenv-safe-webdriver-mocha-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d7e968a0295c0187fef5d43373097ab9585a396b4ff347bbfdd5347a05b365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144929 Malicious code in meteor-readable-norma-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb19a6b6f3257cbf23fa4c3e5f704404b50b398684ae6901bbfae055b308a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149104 Malicious code in venus-capella-mysql-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b724566a0010f3cb95b99768196fefde7a8dc593773bc28c8c4893b746f47489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149803 Malicious code in yaml-publish-dependencies-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed0682bd6ca59294dfa35c074f6637225daabab3688a5ec0e3b230fc6212bb3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141870 Malicious code in elara-css-loader-commitlint-config-angular-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddf581aa3a71ad64ad07ee9dac8fbb7536fec663b15af82f191f14f16c8fc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145318 Malicious code in nconf-firebase-async-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa716ed80e114bef0b9b7b9d962f271faa21538c3e9d5b98a4731097134c33c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149729 Malicious code in xml-ganymede-apex-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0d788757c75f0a67b9a6b6bc0cd600a9ceafda0091cddd81a49848e205f5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140597 Malicious code in chai-luna-sagitta-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d3255a82c5c62dbbb9e1dd96ea178fc57f21d2fd80e8dd64ebf605eda0f22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140272 Malicious code in cache-halley-ini-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0009d5a72a5b89144c27e840976ebd4456b421dd9a9c200dbb23fd1e7d40ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145960 Malicious code in parcel-impulse-dotenv-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf6f1a2a1a9d838f6166968db292f3595c76fc758cfcc26f5beb1b31df51b951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-sass-loader-polaris-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc183012c84bdd3ddd136d2b621899f44ba21be8be6e0b94f9719cf50b67722c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-thuban-despina-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994aae1a5bffc21ac6c1e7d02d8aee1f9f9b02e29f12defd7293fa63c496981c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-europa-apex-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ddf20e422e8808cb7eb318b4d2d62e2d48e99c88bfe22148f26a4260e20c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-flare-kastra-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4d5029e79d92fb9320a01d69d6c1d518d94c63e5fcbd57796022a9dbedee43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-procyon-neptune-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4619fd351f85f1a9556030bb0bf06dcf219938961232dcd3f091f3f5d47fdb47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...