MAL-2025-146895 Malicious code in quantum-avior-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-xenon-chakra-ui-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e267c663a12b26a567a3e6b07f7a2e36b7ae20b41b5d94b5f4b655fd5f09d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145741 Malicious code in oberon-apex-react-bootstrap-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1970fde9afcf4aed637d9a4801d60378c96b21ba6bd3eaa788e07cea42a98164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142886 Malicious code in geckodriver-uninstall-husky-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a2b7f6230965f27a6954f78531a9e677cb5f7407f313086cab21ff0979a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141769 Malicious code in dotenv-safe-pino-pretty-weywot-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0660d191b8889bfff42b4b24d6a2b80d53d8a238e8d3863edf6dfcf5780199a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148502 Malicious code in telesto-sails-bootes-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d609428dc28221939fc9494afcdd831c1230dcb226b52ce23422c34b259723c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142064 Malicious code in enif-spectron-webdriver-quasar-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe70ac7a9565258eb01946e294f519411e0d3f25611c1939bc738eda55982108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149701 Malicious code in xerxes-chromedriver-query-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d823f1f1e63d055ff00a2f0178f8285f6d4c179044f1e950e9003575ff523cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141944 Malicious code in elektra-dotenv-safe-playwright-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 444ba807e71993cf8cb9160a7c3a43dccf9de1d8485f7642a528a4d09e31f210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148929 Malicious code in umbra-octans-soap-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f0d0334ae7410a74f0a261e537a93142679ec79c12d9de6a044cc97119479c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145247 Malicious code in mysql-halley-loop-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297756a4de498d66e54f04ec547723dad2d3c41b72fe87b13eb6442aa05dba9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142720 Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144727 Malicious code in markdownlint-sedna-flare-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccac0ca5ed4eb95ae4a346b68a35cc0148d39329f500d5a3af31185ae88ed48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140916 Malicious code in command-nodemon-foundation-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bb7856d8b86303e4675407ea4fd7ad07065dcd9a5245aa12f3623b5f23df1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141255 Malicious code in cross-env-geckodriver-pino-pretty-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f99bb11d16e020dc0af77a608423045a916298cff6f30d46d7fe9355205208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145995 Malicious code in pavo-delphinus-winston-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce9c55cee6479719563af79bac187704a0d56888847f9e09197a480e90cf749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140858 Malicious code in colors-phoebe-test-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c43aeaa1057f79a268248822cfbb33c3dc5c3fab01fcb14e8148d15d920e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143188 Malicious code in hapi-lyra-europa-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f82c330c425d4821d5ebf44a02c1d02a32ed95f93e53592b907f5104a831de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148007 Malicious code in slidev-janus-aquarius-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ba6f56b7df95c282b16909eb8377d5e194aa02b52d86685443a21590c3699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139234 Malicious code in aether-mysql-eslint-config-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e723bdfeb0ecf0f7b823a7630a67f5018f37e2669440510b547ed98b4e60b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...