MAL-2025-140785 Malicious code in cli-auth-elara-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33555f34a43546f785743dc915015ce5b2118e5313bfa82710c7e164db62ef09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147553 Malicious code in run-script-testcafe-leda-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e7dc9ba0f5d47e98f774ea7995d2500ce1213a9d66d48a42b8ca8ae7391b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148867 Malicious code in uglify-js-bunyan-solis-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18bd78465b6b510bce2ba9729f0be6011d5aa701b7932571ff00e95f439f01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144742 Malicious code in materialize-farout-postcss-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d665c28088eedfe73f9c8e9e233c2e38a00010cebadd41eb580f6925b4a130c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145902 Malicious code in orbit-carpo-stop-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc73fb28f30595738f9102c7e9d6150fe6f8e4e3776f6c4746ad2042242533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144010 Malicious code in jsonp-spinner-dotenv-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3574701b933a49c45959aa3568b887dcfd3d83b1c6197131ec3d1479d610ad0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149565 Malicious code in wolf-tailwindcss-gulp-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5801e2b6693f126c0ffbc6db35ddda9ec2f568c50c039ec0226ba6b2eec9a24c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144070 Malicious code in jwt-bulma-private-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6440b82a3e373f0f05f339f463a887f1b1c5f60136c927d1d72f65b011de2bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147155 Malicious code in regulus-playwright-module-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90075389520fca1dc8dcf50dc52fed0877aa7333d09c48f7364e8a280d81e09a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140642 Malicious code in chalk-hydra-parcel-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489671468c3b3bbbaed96e23a570df1dd1327928a57ba7af09270775777d457d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145214 Malicious code in mui-uglify-js-ophiuchus-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3763d689299b26c905a36ddfa3ea5740c798a3ebbf3ae26b8f4a1e4150c295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144755 Malicious code in materialize-sequelize-antd-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19828eab2f701ae359759a95b517b23ff2544256a38e814ddde9e68560f5c8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145000 Malicious code in mira-altair-markdownlint-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a9a1d2217dc28fa56bf41ba8f7d16d0b014d78bf3de28b24e6c5a8d48a0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147886 Malicious code in sequelize-websockets-uninstall-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e56b0dfb2801e514ced627490d8eb49ac532e0145a3aab0459cc794b2ec23b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141025 Malicious code in config-gridsome-rehype-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3e9d295e11aba56fb8c1aa2464bdcc78ac712308ed1d341483477311ad06bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141373 Malicious code in cygnus-levels-subscription-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90b2d8d106bb26841ff41f634e063ad188c5b35f57d9914a41b250957cf913d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143715 Malicious code in iota-concurrently-docusaurus-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbf361ff79d614937c5e79c19ccc23d0269f3eaa2444951bf67b2d12ac16cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148010 Malicious code in slidev-nestjs-jekyll-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa9b75a2d8edb5a8c369a000f920617aadcc6109b2c759632c6965551d4a997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139549 Malicious code in aquarius-schema-link-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18593dd2817888bcd25d940235adad8818ee1bc9559a873cac93d9ff7cec227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141405 Malicious code in cypress-redis-postgres-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df7812257f57a88a6b73eeae50d0d3543454e9d2f364bbc1cac396fc580ceb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...