MAL-2025-141579 Malicious code in dependencies-request-private-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9eb5412192c45323c5da75be6263a84f0ffc0061d8102030656c4b59e9c859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145700 Malicious code in nuxtjs-colors-update-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847798a82aa947d6f56ab6201b37c9bb6fd5b2e9a8f27f39d89c287bb9059747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143789 Malicious code in jabbah-release-it-enceladus-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ba66041401f9fbf53f8c5df1da308bcaecccb8d8b4546cbfbc2b5d9a4fec37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143340 Malicious code in hexo-docusaurus-hexo-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e33b640cbe6d8a0219377af647a66311dca56b8b99abb4f6e3dfee5fc00123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145486 Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9188b5e4608aca9ab9241332c97595f1497acd8c7a5c7f5ed46cfc93609c0208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140882 Malicious code in comet-mutation-hydra-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf23dea65fac62655d4797e17e72c4af1c8440834c87f6901137f94fba8bf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140228 Malicious code in bulma-sadr-registry-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49139fe083040a54e336806ef9971053450cdd358b3f344e5848b86fcccf433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149528 Malicious code in winston-sqlite-typeorm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0583ba8d9067af98e95c066865b38f493fe46011683758f8afbd70d2cea4b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148122 Malicious code in spectron-protractor-nconf-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4dfe990dbd0d65d1f78fb921819fad3f8ebe875a224734af2b927d4d3e8d38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141212 Malicious code in cosmos-nightwatch-sync-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6396605102581091e612ef14599f18dc9d5bbd7d8323fe8a10dad551777daa5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142581 Malicious code in fork-carpo-xenos-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d435d055edbf91ca49fedb64f445e1a347374a30a36f392b0215d325440de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143692 Malicious code in io-cache-webdriverio-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab5ad4ee1784e75ef77e20efddc0f5f115f497559dcceb0c977e7ebe008c054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148913 Malicious code in ultra-update-nightwatch-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9323a99754cd04354a83c82848390cded79ecc02a51783a2d49ac18dd9d191a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149499 Malicious code in winston-iota-pipe-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb6760a72b4e636b4de6b8a4fd38c221d2afeb5d96ad5654fa851bdd5deaddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139295 Malicious code in algol-forever-regulus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4211f798c9f412b0916abfe461be011e99a9edb91f9ee5b1abcd2094556917da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145326 Malicious code in nconf-procyon-postcss-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62027e42a9ae8ddc26456eb98888942c5bbbf02240aa12170e748cc10717647d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140807 Malicious code in cli-passport-iota-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1c96bbd01bc353cd4d6dd7efc63eb0ebf5878a52296eae35df15e5308f6326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139804 Malicious code in await-proxima-mui-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d650a20b5908dc81ddf5fe514abf51c8ed0990e33cfb1fe510b4db247ea4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148198 Malicious code in spinner-grunt-umbra-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267a2e9b1039dd9ab3920b5fb7f04b7fdcf6aa26b2ed85a9869cb6966293b4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142313 Malicious code in event-geckodriver-orbit-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ea1f351f7731a4ee06d3840c0ff604f3d794d4d09ffdf637f2cb2dfc43f420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...