MAL-2025-143813 Malicious code in janus-indus-slides-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef056ed0baca29f83009d0e395c62567862980b09b39b60559331c2dd19576e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142019 Malicious code in enceladus-antares-gravity-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e32c8ac0dee4dd7d37633af6a882cd5fb1e991b6ddeaaddc7048d785b0dbe62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149655 Malicious code in xenon-oberon-semantic-release-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0928c9c81d167db71db3f299e5566b1a13b3aee1d5842453431229e9ecbcf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144496 Malicious code in local-relay-arcturus-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b94daec19cb98f864c9b7ec7cf51839d4fe4e4bddcac92fb252a4271fe4750b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145452 Malicious code in nightmare-xanthus-axios-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d3cf0cede53ffe6a0ae185eb7fc9c23b589a2252b436d26362ada0706e288f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142931 Malicious code in global-dotenv-safe-mysql-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c214ccb52c4d406e705a660e00408acf6f13309f35035e2ce944ca6a57c77a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139268 Malicious code in aldebaran-bootstrap-mensa-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009c71f1315940d59a9b82670ee814e68fd91ab6279feadee976b4cc23c5e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141037 Malicious code in config-puppeteer-spica-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c91cc0f7b3784492f428d41a716eb3d3b4bd1739e61db8769681c5e6d90d167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146686 Malicious code in protractor-gridsome-levels-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da0a55e3c7d60b91f3bf11a33482c6cf3f299f5b9285ece091b50d6d1699e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139886 Malicious code in backend-exec-readable-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fea43b9ddb5c8afe6a13da0830c99b7394d0a0b70da4e62db1deef40a77521a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149337 Malicious code in webdriver-manager-webdriverio-build-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a769157d32d7855f2e263fa2a168e8f0f4b9fe1cd1c23bd76f0fc64dddc57abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148075 Malicious code in solis-graphql-figures-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45612d2418157df1b47f3b420231aaaf83a4363bb4a5c2aa3eed9c095e71deb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142686 Malicious code in framework-middleware-lacerta-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31df38ca4c3e3277166d99f269c8cc7b1bfd0b00043591dc99a50a8df3940754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147485 Malicious code in rocket-unuk-atlas-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438588389d84f1c5fd8296f29196fa8a29b8a8cc8f93f783d59cdc971cee9b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146954 Malicious code in quasar-jwt-chariklo-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e96037d1d468c6657b8199569db480a0d764b88149d9dc46c87c1d8bfd2d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141200 Malicious code in cosmos-blitz-got-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cab308e3dfecb0e0f1d7e5a6ac6a093767de259085409cb5e48b1f410f5560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140686 Malicious code in changelog-stop-spectron-webdriver-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e35232b2768c3bb1baf79865a9e648987758ad19e7705710da8c61613fec77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147410 Malicious code in reveal-md-ganymede-chromedriver-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bf8e69492fcec22cba663947e29cb7dbc03cf4ad877ee0b9b0db4d8dac3f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145795 Malicious code in odin-hercules-enceladus-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57d036179b1f1465f13df5e058289fac3398ff3f11cd472e0c1199d10056a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149263 Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...