MAL-2025-146860 Malicious code in puppeteer-postgres-algol-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991c904c75f2daa11cbf3ccea2167b46a840af6a20f253a4d8a2b60fc1576445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146142 Malicious code in phoebe-callback-javascript-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863b7bdace3d43c148c9ec83856b8f909c3780ed176684c3d48c0716917f78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143349 Malicious code in hexo-procyon-neptune-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4619fd351f85f1a9556030bb0bf06dcf219938961232dcd3f091f3f5d47fdb47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141416 Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7bd00c7ac28604a872f9aec913094464d5a6717e2f388f33e390d88a8f4360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142288 Malicious code in europa-protractor-readable-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa112931e43f24bbfdf4a2b84e975c5dc4fb7573e88503849b1ec74e6da0a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149145 Malicious code in version-scripts-leda-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750893509b504719e994b929fe1c82872886c9b6bdee346c69b2861bbff32252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147497 Malicious code in rollup-gatsby-carpo-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7633966de8775550897762e490bf07feb82135625f1b6c5529663e41a0889349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148880 Malicious code in uglify-js-quito-ursa-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaadc495679e60a19ec8445196bd4b7acb163dfea8b86c1a624c45ecead0fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142097 Malicious code in epimetheus-library-framework-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8685869bd43d0c7731b440d9340f7d9cbbb1f65bd22794c61ba2fea0e098a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139173 Malicious code in acamar-dagda-koa-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ca820a2561e3af6c3516d615cf56b1e30662bed8bbd8fd6d0ea9752e2b338c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143980 Malicious code in json-prettier-stylelint-leda-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311240dbdb6e2255d7827b9b6f16c5a351db73978700f59d2e023bae65445316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140539 Malicious code in centauri-transport-adonis-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb74cea296b94a2981b8e30e3363e0acbf8e54b3571f4488ba3443c158c06d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140890 Malicious code in comet-spawn-oberon-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9062fb07db4320d7f11521e4591705ba626355af98fcd976a264202a784c3710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149712 Malicious code in xerxes-ora-neptune-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb0059a18193b612f677898d5f447772d729b943e67241154d60529dbf2036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146493 Malicious code in prettier-plugin-markdown-rocket-jwt-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e316f717f951684854f53cc9146802095eb05c75ed1e3c191dde9f06c5ce10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142167 Malicious code in eris-command-rate-limiter-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7abe993bf638dbe98c04283aed6d10f5a2bb33bcdb8c09e606063d2c0a09e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144028 Malicious code in juno-leda-pino-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8243a29c368f8aad9271546a6bf78f1aee26bfa5e3396bf2db32d0c0828de5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148737 Malicious code in tool-jabbah-promise-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdd084e411891ee742f45997c88fb459cdd920afd08dc815f3be0cc4c0424bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141034 Malicious code in config-ophiuchus-karma-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49e03ca3f0551cdfc4df212ad67733536d96af6b3b3ed4f34855c841d85f0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...