MAL-2025-143857 Malicious code in jasmine-meissa-soap-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6109c4527fbe0c61110df548c7dd0fedf4f49d33856b8df215dc9363bbd0b512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139202 Malicious code in achernar-morgan-gulp-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a498c5b041add19cd34cff6f6ea4b481d4f6807e31d95256fdfcc433fba769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139481 Malicious code in apex-magellan-winston-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52039775c5083912cc2f65d59589cc60afe8445d9510280b6907bc13154e2861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147788 Malicious code in sedna-promise-dotenv-parse-variables-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4106b8b561425fbf53c8ff86d6d731d1c4ce20b3a437fe2bd4f5ad0a701667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141135 Malicious code in cors-schema-nightwatch-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3068afe7dca873227fe3f04e64f38db980de42d0e7cc3bfc9bd80c41ccff06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142705 Malicious code in frontend-jekyll-commitizen-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e3259b503d88674f19a0c0a8474a3cf39ac6c21ea4606c82ba85b144e55d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144566 Malicious code in loopback-test-mongodb-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c06e20ea113a93cf3404abcf96e9951035a0ebe9ec1158d959e1b2ff25a16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141281 Malicious code in csrf-commitlint-config-angular-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6402077653de7905967491c9e1aa4a9a1662661767e24f36434c2d419174f1b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141171 Malicious code in corvus-wolf-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31b0a4062c0783f6ddaa777bca86b4ee5d265da61c10b5f0a7b950f7bb3cdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142065 Malicious code in enif-ursa-chakra-ui-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbac449ceaacee48c2d7d57b08c667006ed8e4b373377b2bb4c0797419daf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140270 Malicious code in cache-eridanus-auth-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ca0649729d1dff4f07747f531200bc22904d80ebcbccf330d3a9a9072f5251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144592 Malicious code in lynx-element-ui-radiant-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb459abc2161076cb69f31b2049920a455adad9b0cc0065929cac806e0f95cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142408 Malicious code in farout-despina-scorpius-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad7b76331424a8a1a1b458b74349bbe8a9fb440db79c54dd93f88c05be30d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139240 Malicious code in aether-promise-airbnb-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52083ff1210db5c0190ea675543f7b26ee8b659b12480c04548f5902aec8103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141964 Malicious code in element-ui-charon-juno-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc55b9ee51dffe3585c855ea526d5c0021a493b8f3118d417c5da181aa1fd42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140749 Malicious code in child-process-init-winston-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e17715ecb74d661f9d84520affc87ae678fb865ac45f238a2a0c2a5412c477f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144667 Malicious code in magellan-standard-izar-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6c3df629430f25effc5f60978bc3c26c40d1aeba741761cbad04b32aefacf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144087 Malicious code in jwt-telesto-bootstrap-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8e9921872e0584a4359c709971f101c91881e4b879963244f8b683d3c58d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149856 Malicious code in zenith-neptune-puppeteer-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10a2fd2615539814c75993efda49b5c595a87b90f8e157b39f9e05971922a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149447 Malicious code in weywot-triton-wolf-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c76a23fb4b2ec2a76ff4c94f687642511b026eacfe0b07ee54c8f8ec80fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...