MAL-2025-143524 Malicious code in ignite-puppeteer-sedna-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35174f4fc9f936f9c62e71fd6996be4ca74295263e938ba94323a36ce579ee12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143657 Malicious code in inquirer-redis-nebula-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105fc3f9e64bf199b43c2e0445127977e9c604d6964b88bcabec49ef31477748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146861 Malicious code in puppeteer-prettier-plugin-markdown-loop-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09e89a9ea92244153433e928b97428ee04b1a431d3f3fa32f58050b91df40af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139822 Malicious code in axios-concurrently-loglevel-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34761219db83109baffd93ff8ab4687bdfcd514a0d33561151bdc2f3c0306bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146833 Malicious code in pulsar-html-webpack-plugin-yaml-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de284ef22c3d79d0eb08d849bacc79b6b331418af35f35cdf63627b30baba057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146604 Malicious code in procyon-materialize-non-blocking-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bc6c2ca4e1c5683d6cd7b60e5b027a62c82412bb256bc38dc1ef4c888bad6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141976 Malicious code in element-ui-nextjs-charon-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf1870bf9d264375464e548d8535ac54a699ad95615e37cc390f8af9a2ec280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143485 Malicious code in hyperion-markdown-pdf-janus-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d4e1b0851cea8515c564e889b68650b0cd90bd44082828b01a23f152132fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144265 Malicious code in leda-dependencies-fomalhaut-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ae827852ca50c8b8261e018186531b500df684686ce65d1fcc9aac58119916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140807 Malicious code in cli-passport-iota-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1c96bbd01bc353cd4d6dd7efc63eb0ebf5878a52296eae35df15e5308f6326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141118 Malicious code in cors-chakra-ui-norma-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6583e3fb97f1c660d5acd6273f78cff0fa61a0737fe5b0b5233e8b582d2659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141753 Malicious code in dotenv-safe-global-jsonp-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f253194bc152f223c5f587a9c7fd65460595c70d27749389763c4afbb0de8ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147150 Malicious code in regulus-loopback-gravity-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2e33d869936b58fdbe291e2439f8c32c80eef4c3f563b534efb78ad4bc3f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143541 Malicious code in impulse-dotenv-safe-prompts-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00977fe89791751a5929d9c14386109d623c440e9303ce064db9d658963cf4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146182 Malicious code in phoebe-spectron-halley-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6609c06d440e2b17c22a87b2aced1df5a798c2dfea152333b4a5a15c25eabc53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140170 Malicious code in buffer-readable-geckodriver-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b954e06170c9954928e475e5e6c4b220edc4af31fa80dd5b75c4475ce0c0f9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-backend-spectron-webdriver-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa8744f950b29de6fb9bc5a67d5bcba756474741ce43ace4730cda738ab0fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-css-loader-kaus-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812bd26c1f739d7d665d9699eb06d6a7c7ee07a767f8e58b4ebc21cdf59f5dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143328 Malicious code in hermes-stop-uglify-js-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16dcc90e620362e4bd555b092eb9d0b9b3ab2e93e176b6bb7ee96fb441b8d923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-gulp-ini-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...