MAL-2025-139848 Malicious code in babel-changelog-janus-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f03050bd0f5483fe2c9e2cc51b0ddefa2074e512ce37415611c12ec433f8a37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144015 Malicious code in juno-antares-flare-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5bdc635e072a475177d4dadf2c9890985c9678f720a2ef69952a4feb3c3dc28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141526 Malicious code in delphinus-non-blocking-mysql-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1d58c5a5d0d5e690108078ebedab4b4ccd7530c04b5a21e5335aaa9bcbc593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147902 Malicious code in server-nova-iota-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdaac403aae9a7b4a8d1b8cdb71e3afca9bb3998c5e8bca566d34792db4efbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139585 Malicious code in ariel-docusaurus-build-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ecd4de8da539df054c32156144ca72d1e2a912162876b41f46cb5188ec896c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149082 Malicious code in vega-auriga-envconfig-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2a9dc7d0b8bb3ad45861f0210582b546f4eb346f466656e08ab2969d8eac5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140536 Malicious code in centauri-resolvers-helmet-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75ee7fb75d478c231be298854de00c4baf6a337165fdbe78ed46807ae66605f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144765 Malicious code in mdx-dotenv-safe-local-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061b9f93bbb20e42b5152a86e387d3e303f889c7c7c740e8844b649cf43deca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141204 Malicious code in cosmos-cygnus-lyra-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea5671549d7a81850a48019ed11bd27275dd856aa63b52f9897f866ec1a5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147063 Malicious code in react-bootstrap-lint-alphard-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3684fd38755e805195dd3647625892859bfef3ea8e3c810285fb6382548a89c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148753 Malicious code in tool-semantic-ui-loop-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5db7115ede80e9b0da93eea8563dc13d2bfba4b5706c69f71dfffd4c7e4703e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146341 Malicious code in polaris-flare-wezen-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f1701576b7f75072f88478c01ff68a76e579fe05dbcf5a902e4bf45b63903e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147142 Malicious code in regulus-blitz-jwt-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad40f6b4c653a8d4b76f65b28575d51152312e7a0a56ca06c6229c9f07afcde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147651 Malicious code in sails-lint-staged-dotenv-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d0ed88c7eafaccd1ec5e1fed2549646dc207292a5716bd4039240387a944f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146436 Malicious code in postgres-inquirer-octans-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cddb6832b76e91d97d935d0d9d8a7f26ee084ca8b89b9e2b9d0a4a080d35ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140788 Malicious code in cli-celeste-cors-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7492e3952d9434eafd92a7f6c3705c199c7ed56c4ee9f13f1a3fbdeccbf70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140785 Malicious code in cli-auth-elara-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33555f34a43546f785743dc915015ce5b2118e5313bfa82710c7e164db62ef09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142034 Malicious code in enceladus-quito-global-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c2bcc353ee64b14034393fc907da69d7c5bac0586ce770626437ed50d7952f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146431 Malicious code in postgres-figures-wezen-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0382daad1fd5a2ad7bc91f97ebf612a482fc8992e192810077f37019cab03c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148510 Malicious code in terser-auth-axios-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ca9de95c4d2f1954696851df6eeb56a9ab45bd6ca6f020331f31b003c67e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...