MAL-2025-140756 Malicious code in child-process-socketio-envconfig-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebedcdc5ce974e9a83ff75820bcf48fe3fb997ee0bbc3c3096bcffbe5d10246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146961 Malicious code in quasar-tethys-auth0-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a836a7dd86aef731e1f28ca27c1096d36492ff013274685358d2995bd5b31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139599 Malicious code in ariel-ursa-nodemon-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c8ef633f483964dc26c0274ee176e28dfbf8faf7ca47094bdec593aed66d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-nodemon-odin-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1c280ebb78f95f75f7f5f4315f0c75b4ddf9e6e621e4b08db6a03b5496aef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-vega-vulcan-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1d9a2f5748a775bb91bcf43460d2e5250749c958745fd3b927b2f4ad17a9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146180 Malicious code in phoebe-sass-loader-luna-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8766ed20a92468a6e5475592ad000bc62693099496c56e40d0987f34f6cb7fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147248 Malicious code in remark-janus-socketio-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9e00c3b387e0d4c24f5c5bbfa1bb719d4839b704ca295d7767ad124b27dd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139844 Malicious code in babel-atlas-cordelia-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe4c8839f981728634c7a122a4d6dd3c0fa6ec46fa24d71e759a5a59c609f888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147125 Malicious code in registry-europa-antares-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47da6a64a6a0952ceae89b41a52613eafa5aa8d8d0d973dbdffd14faf9b588b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142384 Malicious code in express-mini-css-extract-plugin-procyon-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f68f50a3b19559dfa4d0186fa26e9a37752bdf68b487dd661e43193c194e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140234 Malicious code in bulma-venus-test-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4201069df227c6ed3a83016368b73803b06102600a6f33fd00fa86c969fae75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142852 Malicious code in gatsby-tethys-private-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e031bb5a34be3b533614491c540dd7cabd176f1d9dc578b0cdf0a38a52c14010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149106 Malicious code in venus-deimos-public-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d0d778c8df669fba403d905c69e073ea9e7cb886541e7d250b5deeda1742b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141437 Malicious code in cz-conventional-changelog-zenobia-javascript-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2442a2f792bd52751317c2d99d2e451ae980812d3b156f2d4e8ed8ac4e3897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148648 Malicious code in thuban-development-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145080 Malicious code in mocha-gulp-cordelia-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a395ae24f7d0c1eadb39257cc219205772046202a800ef8390ac3a07011e0a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148793 Malicious code in transport-mensa-tool-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b711e55d7e247b8426e9450555e8fd0d78164118f6e17df135b162418d22abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141728 Malicious code in dotenv-parse-variables-nightmare-aether-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293766d85f705540910cf4c7fa5b34fed1ce2705dab395aa9b0d51f30ed0ce72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140623 Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146240 Malicious code in pino-pretty-markdown-pdf-altair-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573304594207ecf8910723db18dc49d6e07edd5c5aee43c6a5ddea60ab7800f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...