MAL-2025-143068 Malicious code in grunt-pegasus-carpo-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0b6d9f2943208f90642829604ccf588014d5ade91aeeac3b29505525930402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144958 Malicious code in middleware-jasmine-nightwatch-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8766d8d60ad74c2cf23402725bb2b7a3c14dd9413d43c03914e39a047fd977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147592 Malicious code in sagitta-dotenv-parse-variables-sedna-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e631ac7a9f4e7976e8b8d30eb13de54d25dc87fc9cd528ac93f946c47ca990a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148736 Malicious code in tool-jabbah-inquirer-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c23f115a9c2230624fa6f80276eacf194a28e0e56c5b3d3a789f1e944714c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142898 Malicious code in gemini-grunt-spectron-webdriver-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd2eb0f83b8c1e751ec487940539f95186eba20bfebf72fa8634b5c6935a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140543 Malicious code in centaurus-enif-registry-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6ac6a6965728f64abfb8f42a82d75becc9f9347d7f4a9e8279711d36bb478a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147326 Malicious code in resolvers-hydra-adonis-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9766e27ad16780af1cc83b26d319905d9c6ffcf233d0efe0840ea32a88799f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149654 Malicious code in xenon-oauth-framework-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dce1782e99ecf2a9a1ac060d68897c127bf998539a101ddbcb4e03d4c4e560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147707 Malicious code in scorpius-deimos-hugo-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927c90423c37a0e1916c96ebc222fef6f8943fb8899be71e305d6cc4bfcc9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147694 Malicious code in schema-hermes-protractor-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311ec7f9045fddf8c7c21a4404faf26ee70fedcfc9e70a91864483145cfcc228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145378 Malicious code in neptune-request-hexo-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ed02bd25ed21d5f7601ebb7225bde8001cdb1d7df9b1567c9de1530a5417a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139969 Malicious code in betelgeuse-betelgeuse-cassini-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de30e4d515c90c8d81f0aee56858ae6df343a3a02ddf287cc29b3b20c1380a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-prettier-stylelint-cross-env-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791b1dc189284d27d4648571cf5f77f50d62b3a6a7d3d9030af59acc5e12c91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-chromedriver-pegasus-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb003af6977922f52dbd2f8ff8af98ba4dfdbd3b2d6c2d8b08d9791f43110a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-rollup-bootstrap-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf705e24bcc766ffd8b06f92a877be746751610972bad74059d45440502aab2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-nightwatch-galaxy-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02934da1a26beaa527e0dc78a17b97871abc9faa5d6644b390f36b5ba820093d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-init-element-ui-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99b76e66f4e5103280b258034bc43bdc7140d62607e388d799b69d512579e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e146e7e103cbcdd39e76b3fd5cf858a075d921f796820be6880d0bfea79a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-antd-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b73d5108ceb7964a0b3a0e61afd7965a64b68bf06041bb1b24837b5be84fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-lynx-alphard-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9b55d95bff3b01b820e5275231787b88a0bedba36e9439919568bbf7936231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...