MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141989 Malicious code in eleventy-aether-package-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35202d4e67fc27cc38dae4b8a48e505bae3cefd543cacc2a79d667c7cf47751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140520 Malicious code in celeste-remark-readable-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724e457d8f4a5cdd399e63be6f869bbfb4f00b98106d11925fdc6580ac65bf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145595 Malicious code in nodemon-sedna-elektra-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5945109b83f9ae125adf57990fa9ae515fb677c2bef5f12a56a6c7192ac91329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143499 Malicious code in hyperion-sedna-umbra-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b9009f151a521eec1da0eb97632ce95d3433ba6e5c443a04f0c827bc181730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140768 Malicious code in chromedriver-elektra-halley-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ec5f701b3069721f2171df71e6cb4b2a89f1cf132bfcb9097a1220f44b1f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142864 Malicious code in geckodriver-forever-eslint-config-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e474f0bb15ac64d99eb8c5656bc4569ae5da7d444d529a7f2b083f234245dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144926 Malicious code in meteor-pulsar-prompts-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea703e4ae5834db4e876cc760b1a58ec2cd07a7e560a94aa532b291a434dab10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-salmon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a442488ef5caabca8bae9b82d2a185abf2102a99144d9978ab6d56435bbfa3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138636 Malicious code in cool-black-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b4bffa4a144b3196425db620389a92d7a27be809c413aab9631c73fcd224bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-moccasin-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766fefabea1ab75df7bd4779927413822d03cb9cbabead84d4a76ff3416a9831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obliged-gray-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04fe894ddc20327b2fb3e7036c84fe23114a4183385c745608ac91feb4a2778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139035 Malicious code in spotty-peach-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6d0719b82d7975eae04cbccabd5809b89ca30b1486e425694e71f9a9d8d9ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139079 Malicious code in tired-olive-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73abdcc3b62486ac5b6a9409fa344cd86a57dcca61d5268fb1bc7c2d8499823a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital-peach-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e360ef67820510a0b6f73b56535080f3961e593c60ee32b21db7d19e0d4adaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138593 Malicious code in basic-green-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27433f0fa6bf15c5f4060e5f50fb47748d2d2ccdf05579f278a8b6f6d3accb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky-coffee-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937baec00ac8f0904a27fcc57288a2842d8ae07618857a3812c607570368d851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable-olive-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b584a7dd32122542a704ecc8eef1b178fee04df2fbdc39fdf5de20861c63543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-lime-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e09cd373959464c2b553567b37856815f98e1e735eb355a835e2bc60ba10c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-rose-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79756f833eb7b85846ecd66b15a72b2513b4a28a53a3e54df116a02efbeb293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...