MAL-2025-149196 Malicious code in vuepress-miranda-restart-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bff913ba9557155fdba91e2de8f7c7272ae33b7af485e13141411e5ad745346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148378 Malicious code in superagent-corvus-enif-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e241e8e58df7e4e881758896c71bbf5f061b413610ef47186c207cc5ed6f30e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145242 Malicious code in mysql-commitlint-json-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0023ee1ba06a2691819a2310fba47ceb9d79051089d1ed1ce19b0e5382973aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148379 Malicious code in superagent-cross-env-csv-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c342fb3e60fa2afceecf9082d7c1b1dea1e6af2b2fb452d854bc52c3d7d9892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149471 Malicious code in wezen-uglify-js-stop-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cb747f817d3854691f2f4e78d85638306150ffa98f5d294bc280cfc35f51d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142415 Malicious code in farout-indus-iota-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6f2da59c9af0e54ae6294798270600d6aaca512e3300354d315d1a0509d747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147855 Malicious code in semantic-ui-pulsar-reveal-md-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48a80d995eb8677aec2ff6f9f1e190ddc765ead947e37559d1412568a96be99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-eridanus-iota-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65aa2b88d2e7d66ee39513bfc1364e086fda5473dc9a5bdf8acb712cfd322ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145050 Malicious code in miranda-procyon-bulma-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0a40a496ba5fb94008da2fc5fb151c661576d50ab42c5af6f8f0f38c01356d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146181 Malicious code in phoebe-sequelize-meissa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06e8e9f443fc6dbd135e27fdb0b50e6a3afc24eae0e4dca9d29dfd7357003b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139577 Malicious code in arcturus-toml-carpo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139378 Malicious code in andromeda-markdown-pdf-loglevel-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1022d30d17df30a59e7919fbc13c80d55980698812493846073dc6a911a8912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143768 Malicious code in jabbah-aether-heka-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be60625e4315cdb6c9c73d8ac61b43d26e1c358e30d28b381c9ce97b78e7a6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143331 Malicious code in hermes-webdriver-manager-atlas-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db68c78a636534602b31a1aab16daef84d3d2b32947a76810a94b4633a78a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142863 Malicious code in geckodriver-dependencies-ursa-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144197 Malicious code in koa-neptune-slidev-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca591866a0d3e7083a8e6c41f35814d002fc420eefffdc1e60ff6f99becf00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140787 Malicious code in cli-browserify-mini-css-extract-plugin-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83b3e7aaa426034023de777e1dccefb9d2fdcde96c988ed4548ef73db41363c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147007 Malicious code in quito-umbra-registry-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef2cead8bc437414921c520821083a4ff3b65865bf0b3b088799fa0c5de2657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143859 Malicious code in jasmine-nuxtjs-terser-webpack-plugin-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122079d9ca0cc4f5bf4c3860f735fbcb36bfc6b3b7d1bd0a7dfed0b6c375c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145150 Malicious code in mongoose-dotenv-safe-fornax-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec74ae400b0640ddf9fcf4390f177967e895d9cdcffce66837c6fa60cadd3106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...