MAL-2025-147424 Malicious code in reveal-md-proxima-changelog-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d200af1f64920b8c171bd01b24260d2f9d7eb2b319c8b640d116462512d5570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139728 Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142451 Malicious code in fetch-meteor-leda-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed1f615cbcd2d3bd47a49aaecfa6aa05fd3a94d0a42a40a9394bf20393af4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141222 Malicious code in cosmos-yonder-bunyan-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44a36054344eedeee26f2b2a428f1fd1a1bc227d798ee651584d11ab93c76cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146493 Malicious code in prettier-plugin-markdown-rocket-jwt-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e316f717f951684854f53cc9146802095eb05c75ed1e3c191dde9f06c5ce10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146702 Malicious code in protractor-webdriver-mocha-bootstrap-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988ea1acfef0fe0dbc0115af5b950892ce7e7ce4aa468ac0006e0be8a6cb6950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148099 Malicious code in spawn-javascript-octans-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64dd616828dae7a57cdb79f4ef09c707f80d91e83b6d45254dcf58df9530338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149240 Malicious code in vulcan-init-pino-pretty-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f8344d04ae5521883f7f79bbe97baff5a334a93ecff03a3abc413f5a49e990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144276 Malicious code in leda-janus-solis-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed9fb31c30ca5d5d897eff38497628d504dc12949cc78ef5f059a5a10c1355d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149367 Malicious code in webdriverio-electron-eris-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da77ab2059298b817155b92ac964758be6ef5076d9b7cf35ca406fb0edbc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144128 Malicious code in kastra-procyon-typeorm-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4d0f7fa85bbb01f6eeff4ae6595e8321f9e5b9f3a6f7618c0ee33813ad89a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145303 Malicious code in nconf-apollo-ursa-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436dd8859e1f1b9fa7b1ea214fde2d84d4d19ab7b120dfd33ea32afc67345d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143481 Malicious code in hyperion-janus-mutation-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba7b7eb0f6c687a9bcde5c0c532b5d9698dc27484469216a559c9bcc183edd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148973 Malicious code in uninstall-yildun-corvus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71389884d84d46c7588e1f5e417d4d265853fc74c19a59cbe8fe39fb0d0c3d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140890 Malicious code in comet-spawn-oberon-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9062fb07db4320d7f11521e4591705ba626355af98fcd976a264202a784c3710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149145 Malicious code in version-scripts-leda-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750893509b504719e994b929fe1c82872886c9b6bdee346c69b2861bbff32252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149350 Malicious code in webdriver-mocha-jabbah-csv-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42546448faae6a4d65c744b2b68f7c5abb36c64e33b66466ea0e22c898a9363f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148299 Malicious code in stop-node-config-zenith-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae899ccb8291de7f8de581daee9c0b626457329723065edf32d96a66cbaad7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149587 Malicious code in xanadu-auth0-xo-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b26664e016b9ce769434fbfbbce3b3a7ed799f42d2c8b2848fda3fa7fc2cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143220 Malicious code in heka-umbra-typeorm-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2821646ca02deaac2a323569de93daee25d1a4466d7bd2c820366fce5860099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...