MAL-2025-143940 Malicious code in jest-xenon-virgo-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41052832b11c01621451b9c793d8ca4bafa5721676a30c232182ae3cf32657b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142180 Malicious code in eris-prompts-aurora-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11be7b2ecaf34df0c32fbae745c6c3a05bde5437eccbeb24fc6802ad2c760001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141319 Malicious code in css-loader-terser-rimraf-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3369b39705936e81e044143deeb3d264e0c799da1d7145d7a34a47964089ea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143268 Malicious code in helmet-zenobia-jest-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8318772a9d81784738fd36d28c00cf1665ab566d585377a4d5f4987dadde5f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144613 Malicious code in lyra-leda-css-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b65512863f456afde79316705ac47d3730e71049e0ea42f9e6941aadc0dcea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142189 Malicious code in eslint-cluster-cypress-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 637d53ea4287f7af8a63ec76245b34257bda9841fb3c7c973f50572c1f7328c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140170 Malicious code in buffer-readable-geckodriver-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b954e06170c9954928e475e5e6c4b220edc4af31fa80dd5b75c4475ce0c0f9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141287 Malicious code in csrf-izar-resolvers-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a98268bc4d6827717267c3f7cb7dcdb135f6828102d3a638c513591381dff15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147918 Malicious code in shelljs-library-development-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3656af8447eaf132ade4da48311dede7839d72f50c653ff9c19ceff030aff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142782 Malicious code in gacrux-sedna-nextjs-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e307a27a7c1667b7b33c2efac98354eefe51925d335545339cebbe0277a3aa8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141324 Malicious code in css-minimizer-webpack-plugin-docusaurus-react-bootstrap-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3aa9ac1422845c7110ab66791986ea43e2a7c9c6291c4a34b6c8715f22663a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145123 Malicious code in mongodb-cz-conventional-changelog-mensa-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1a7faf3baca9e07a6ceaeb3feeaa18038e6016bc1bbac64f91e7ba751f4722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147724 Malicious code in scripts-arcturus-capella-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a234270a69e264a43939406df15afdf5f18be1d2553e69856deddc166eedb52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145466 Malicious code in nightwatch-figures-postcss-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5684f253471f3ad92faf82be19ae9e11bcc466730f601e3572e2e65b93347e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144892 Malicious code in metalsmith-vulcan-lint-staged-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00adaedcfef1576cbaa1825eef6a2fc622e44390a3c11db042201dc15ce9b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141314 Malicious code in css-loader-relay-element-ui-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3a2b6b8eb1dcee62835621683bfa4bac6dc855bdb77725f0cb058fccaf4ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149593 Malicious code in xanadu-deneb-non-blocking-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed8eae916437f4396d4472e5b2e80860392a6b8fb1d4c93e30e3815f60809f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-changelog-janus-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f03050bd0f5483fe2c9e2cc51b0ddefa2074e512ce37415611c12ec433f8a37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147235 Malicious code in release-it-sass-loader-parcel-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5b769cb83d4424c30fd9e0d87d8ae149c3c2188ae87c28d2c06b4ec5c28b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-nconf-magellan-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea277790b8fe234a34902417fcb515d38b383e722e56e1480996b8af1e9c197d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...