MAL-2025-140132 Malicious code in browserify-meteor-exec-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7097b25471597433a406c160c80c2b71d0f76c3ef49421322f2d34b31c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141014 Malicious code in concurrently-standard-bellatrix-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff872f994bfa9e09bcac8fa5dae43c126048766989a5501ddd911c41cc1fcaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147029 Malicious code in rate-limiter-ariel-slides-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ebce7dd4a32781d94b11798bea39890801057ff66aa44dfcd434474655649d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139822 Malicious code in axios-concurrently-loglevel-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34761219db83109baffd93ff8ab4687bdfcd514a0d33561151bdc2f3c0306bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145076 Malicious code in mocha-ganymede-dependencies-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbf7f214a0fd32e6dffcfce3cd4db712ae91ae3fc1f73988bdf26b98e0d7c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-gatsby-figures-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861fb5329fb77e004899efaba3a94f1383f864ba21060609716072f58bf494ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-await-janus-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f95e8dca9374bd68093ca7b66d2bc1f9fe8b85ed4d42fe457323a52534de0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-blitz-radiant-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2272dce106a80652d7130e9f69d1980ddc9bc530edc7cba63e8fee9d913ef8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-xanthus-apollo-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab9a3fbabea8e9eda0274a512f0c48eb29716a7e17bb3f5383dbf3e01f197ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-jsonp-triton-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4442839a576bde6f5711839aebc86fbf239039a98fb50a343307fadc3dcc0e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-hapi-solis-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c674bde158ddefba91c9d567868a8757a09867e88fbb79e9ec1e442218ce0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140296 Malicious code in callback-bellatrix-dotenv-safe-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e86a7248a8eb2b1c9dcf387615c6691ab9242e4d8847479817c6adc571471ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-fornax-terser-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8362755930a3cf4a26b1bc94e15abf929162cddfd7dca4381c2381381116dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141148 Malicious code in corvus-corvus-atlas-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc931c001a969e7ec61a962f459ddf810a83bfaaf634d60d45f190c942681170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142271 Malicious code in europa-impulse-chariklo-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03c6cc4cc19364598b7fee08473fa7953fe3deed86359c01901586f8f86e716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147646 Malicious code in sails-duplex-postgres-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7832e92751940047922d50f933d84f6178e5b9be8ec22e632df3be4ebb452c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148050 Malicious code in socketio-eris-delphinus-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc71ddc3dcf1582b910c6e15c26a077a5a4e6f1e21b3f00fd3f1b8e02ee14dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-global-superagent-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8563f28a2a27d7861250bad8476d45d2682ca1232f97b8792980d923d60542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-deimos-colors-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a78a3e303545fe7a4cf7c007b28503496a490a019602bff17224b9d992cec9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-procyon-rehype-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f341d2a974fc570dc7f1c47a3322c6fee747c68d8ce6c087f689e905325a6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...