MAL-2025-147886 Malicious code in sequelize-websockets-uninstall-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e56b0dfb2801e514ced627490d8eb49ac532e0145a3aab0459cc794b2ec23b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145684 Malicious code in npm-nodejs-umbriel-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c976dc4e8caa65dad055cd3ea3b6bd8738c7eb21895548d493f81de4dcd32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140704 Malicious code in chariklo-mongoose-corvus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b778f62ff3e50c7e087b010f41e56a52e5f270155f52bed36a78f8f40085da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-vuepress-quantum-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54baa5ade6015fb6c9054123ae3a3e98a0e3155acfa1feb4ea656bd3a588600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145029 Malicious code in miranda-dotenv-parse-variables-middleware-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbc13dda52cce500456ae68796660af748d0bb9d8b77d1273e8d13427b21b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149573 Malicious code in writable-mui-eclipse-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45366a5bba33878c6502bbbd773eb845366dcc9940e5c867b6093acc04700fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141526 Malicious code in delphinus-non-blocking-mysql-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1d58c5a5d0d5e690108078ebedab4b4ccd7530c04b5a21e5335aaa9bcbc593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149307 Malicious code in webdriver-manager-acamar-relay-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe92343fac4e143ed5924503e48e35b5cd45f6ef2db00cb32599c848322da94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146279 Malicious code in playwright-cressida-rehype-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b237a8e7e14667378d4e2a7e5359081b1055c933aacd152a5534f93d3d31de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149002 Malicious code in update-typeorm-loopback-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbb954ef4c5ec76ea2247616639211ea442a635b1ee9e5ca1c9af788d21e0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139333 Malicious code in alphard-odin-radiant-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061b018c3c576a12e91b1414b540a920cf4d9a62aa4d6901c07ab7ef1b75bd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143071 Malicious code in grunt-promise-vuetify-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7391023fb97db27e60952bee597e73cca8d4958978321dea8fc85e8695ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145137 Malicious code in mongodb-prettier-stylelint-warp-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b98d60581def47fbffb1f138672c4f5589cbd194e37757ea4734716c294b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144594 Malicious code in lynx-iota-cz-conventional-changelog-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1652856c44e9fe7376fb9868f2b409d579a3e47c2aec587f52af141990bc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149489 Malicious code in winston-dynamo-axios-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a2d57cd4219b83d4e49de185811d6795afc72bc5081f1335499a70cb9b3c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139549 Malicious code in aquarius-schema-link-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18593dd2817888bcd25d940235adad8818ee1bc9559a873cac93d9ff7cec227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141263 Malicious code in cross-env-parcel-forever-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbff56665ae37d90628d5c06182c5e45b39d4b4921a2f7476a3c3cabef7a62f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139424 Malicious code in antares-nebula-webdriver-mocha-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c754df984c3ca6bbdfc1ad47c5181c9fb48593fe4212e74086a8e5cf186b6f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143860 Malicious code in jasmine-pegasus-ganymede-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8806337254abbb601db4f0aeea920ca50a9164692f6a8295b7ff69ca6582132c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139429 Malicious code in antares-pegasus-request-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470d92331ac50589ccac15bd616bab9fcb1114c68a38f4c861ac672f9c8bf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...