MAL-2025-139613 Malicious code in astro-phenomic-yakutsk-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461199e72607e728901321d9c389e62b9c84c9d09c748e5bc6c8b32c0f881eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147079 Malicious code in readable-element-ui-webdriver-mocha-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75fb8bda20956643577e8a635c72bc21feaad66dca60d14fb62e8f6be8978c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148787 Malicious code in transport-dynamo-hyperion-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e02a9b6950f1c0062ca81f751201a1d3e82b793e604f56bfe93c574fe06b780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142824 Malicious code in ganymede-titan-rollup-plugin-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9413cd573eaf0605e0ffed7a4a693e158084145957dfbc0cd50f5112ad02e331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149493 Malicious code in winston-farout-heka-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ed0798bc65f6397f3a98555c061206cd8d29c3eb7dfabae22c56a5d8d034c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146003 Malicious code in pavo-mongoose-yaml-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f526fd620049d5e20d88f616600242a7854959f96259dc05de485d4b6b9aa1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143451 Malicious code in hydra-postcss-heka-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fd2d7a5c80c5698eeb615aee37f27284e32645ca8a48cf6d96f7e32684f2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147713 Malicious code in scorpius-puppeteer-gravity-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a295c665cd756be249510160bcea8ff37c3445fbe45a423d3186e8403d9625f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140333 Malicious code in callisto-global-kronos-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684e56e46ef72bf385d82b2ca44a9ec22885037864e2c73ade1ce4b3baafa169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146090 Malicious code in perseus-jupiter-got-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c953cd749ca2baddd8a485ccd923306d0e09b1eb89a98f5aeb1aa424be888e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147892 Malicious code in server-command-lyra-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599182e18ffd8a86cfa7e3f6b6279704d15e1d14f57cc865232a8d1b6d06cbe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144147 Malicious code in kaus-jest-miranda-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4e3f11822f69cc3af5103540deaa2a91bf3bdeb149f75822db55827184c9fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142671 Malicious code in foundation-sagitta-meissa-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cca1b2ab5bd53cc85c6357354786a95521da387fc53eebf4744c794b0ae539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139872 Malicious code in babel-rehype-mini-css-extract-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1fc500675fae07b9a876c104374b27b82820a5d8bcfaad02b275aa0426a718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148050 Malicious code in socketio-eris-delphinus-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc71ddc3dcf1582b910c6e15c26a077a5a4e6f1e21b3f00fd3f1b8e02ee14dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140792 Malicious code in cli-dactyl-restart-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e4eca5980d748e273b5ae71572bacf25be9a4a96d84712a0984c38431372d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148894 Malicious code in ultra-gemini-elara-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1826034a534b444fe5c322a889eacae769fc5f1bc3335f37e8e0a0239945c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149095 Malicious code in vega-nebula-gacrux-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8bd7530893d5854b41bd965fb6d3202ceea9182089534bf2d30a05ba208c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149328 Malicious code in webdriver-manager-nashira-loop-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f6a04ec806bb992913d1853766b213c4a81232fe66336bf4acdf188e33e9c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144733 Malicious code in materialize-await-cosmiconfig-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153d9c78b1503d4d82f8378f93edab2df4d30b9f1128f3bb265df2952e37843b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...