MAL-2025-148094 Malicious code in spawn-chai-ursa-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603a1063a78f7e38fe4f0f14980576141ab4a2b8b61770ff4e99fb73146f6944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147505 Malicious code in rollup-nova-inquirer-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f33f361a42c5d6ef8fae97296eb72132192a355ff8bbb783c6031b36c63d437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149320 Malicious code in webdriver-manager-fusion-winston-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d92967a9804fd7bbf5a4f235226c1b2037d5de7080ff74b71911be59edd693c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142811 Malicious code in ganymede-morgan-child-process-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44afe468a2cfb861a8c3a817e4bd3cfe36fff2d9c10d3c1d40d898c7fdf4c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144543 Malicious code in loopback-bunyan-kinetic-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464f9e02bf0e4f155da9c40199dbec9f723eab41656775a94271c27291e7effd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146455 Malicious code in prettier-await-sedna-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da20979527e65cdb03261ee8581c9c8260077ed1257406601373d8afa2819e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146147 Malicious code in phoebe-cypress-telesto-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b663e67c0eeee9fc86d4dee7e14c2c3068bdbb64e9ee2c2d6a63e9ea6f40a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147726 Malicious code in scripts-build-ganymede-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca854d6df3b48be4282c2ab22c37905502a03ba15db1d06cb12e79768d8d2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145961 Malicious code in parcel-karma-remark-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b675f3b0e242eb28c37eff42047754b0b896cbd5ec4452299033902d1bc3b9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146984 Malicious code in query-webdriver-mocha-version-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3669afbf55ee3aa1d38f6388b3a66bdcf3ef82d8c1533706c7ce365b968efff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142551 Malicious code in fomalhaut-rehype-reveal-md-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7dec11cc4cb63ffd201344bed70a7037ab91dd59c9a4b92daeefc768815f59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147783 Malicious code in sedna-pavo-mocha-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f613be6a51ea941638b5a12837877d984872eb3b1f8b708a07c955192e00c566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141448 Malicious code in dactyl-native-superagent-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9399d903b38766a58790ac43991a2e3704dcf083ce309f85ffdf08a9046286c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143119 Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147293 Malicious code in request-event-antares-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450c77c16e7214dddfd423894d2688c8084da5ed5cd5285c01ccd574dca75de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149506 Malicious code in winston-loglevel-ariel-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8400d28101f9e8945eeecd6bc1b83b5ef1c31064aba6739eb69b2bd2223d4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142176 Malicious code in eris-meteor-dependencies-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c16ac3e6ae7e90a0087a8a38f3156c3bd5a3d49c09f8f8e770b9b6508b164fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149777 Malicious code in yakutsk-procyon-eclipse-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510cb8697d784b8984e5285198e1c850f3cb37c8c5190e25e1265fda5268fcc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142676 Malicious code in framework-astro-library-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef35db8d4a04cadcdd6e1d033c10b92183e380161dd5773465e45152621bf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139490 Malicious code in apollo-acamar-babel-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975bae18c661d9351a0e2be74691280b2dad94cb2b2d07b16b53da063e929ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...