MAL-2025-141790 Malicious code in draco-callback-gacrux-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea8ba295da82ad1827008afbb037b09bcea5cb007076459638f4ec6b024ec56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148059 Malicious code in socketio-meteor-warp-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1968894fa7e96f8475532a15681d64684abb98aeeffeda42d690bad5dbdf93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142792 Malicious code in galaxy-meissa-pino-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06289dc02cdd5ad44cee1bc94b049c65e3cad453ccc0035ecb437e1c5b9de360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141007 Malicious code in concurrently-hexo-weywot-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc8cda0f2eb6119ce7dccfd4014dedc2aeb7d4453e9ef894324d158b657e121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141835 Malicious code in dynamo-phoebe-yildun-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73982bcdeebf085907110b52f7125d6b6f8be6363befafffd44ffd4a6dcbc7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143274 Malicious code in hercules-ceres-jest-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968504ba2b4fd0f91b0925a1a6f37f0f562d4535dd22ce439ac50ad7e2326765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144734 Malicious code in materialize-await-equinox-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b788c7f73eabc1f4be55768daabef3d611044ebbe93e7a4baf4947708b24a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140228 Malicious code in bulma-sadr-registry-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49139fe083040a54e336806ef9971053450cdd358b3f344e5848b86fcccf433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145396 Malicious code in nestjs-geckodriver-avior-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62e204bae2fb75e674c3daa56e4084b44aab006ab2b5894f7a21e17a775b5ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139909 Malicious code in barnard-izar-castor-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a0a7c2000bdd07f91cd07e1229e7af2f56859178e4a5c36f9e5c9f818c0b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143171 Malicious code in halley-vulcan-nightwatch-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba8459812b58b3adb0a734a6bc6f6acbcea1e099036c9801ce7b9bc035bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148838 Malicious code in typeorm-bulma-optimize-css-assets-webpack-plugin-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7515ed2b950e80d5b1a46ef75bbdb469b833c34296cf80bd25ba697f6e0fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143098 Malicious code in grus-polaris-cressida-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ba26fa4dbb1e602577b4133c013d196b716317ba0da07038cef37f6f9ff5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149499 Malicious code in winston-iota-pipe-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb6760a72b4e636b4de6b8a4fd38c221d2afeb5d96ad5654fa851bdd5deaddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148570 Malicious code in test-eclipse-prompts-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565adc0c7206777686a96baffa9365969a46e1d2b689e8a2e2a4253039f35fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142671 Malicious code in foundation-sagitta-meissa-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cca1b2ab5bd53cc85c6357354786a95521da387fc53eebf4744c794b0ae539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144801 Malicious code in meissa-css-minimizer-webpack-plugin-kinetic-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3e37d1cf32921aa706fc4ffd97c8fe9ad694e5c8c7a37d55e39241b81f6b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139603 Malicious code in astro-fetch-orbit-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4a4aec0103e82a9b92eec6da2e2f37912178bf0574e603571607567dc07da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141626 Malicious code in development-nova-carpo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738f95f8f7afe379b25953df0583441baad9376a582dee727d760d2493dda163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148111 Malicious code in spectron-ceres-loglevel-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d425ced84185718748eef6d19c741cb046ce77c9e96bc494a57beb19efbb855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...