MAL-2025-141212 Malicious code in cosmos-nightwatch-sync-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6396605102581091e612ef14599f18dc9d5bbd7d8323fe8a10dad551777daa5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147368 Malicious code in rest-tailwindcss-hyperion-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e22a4a72ba894fba6775542bbfed8bdd8794b17d73198abd401b0c381988505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142168 Malicious code in eris-dotenv-safe-express-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cea3b7c73078f287e22f895f9b13af68cee4ba61b7c950d714e05f780574fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147989 Malicious code in slides-loopback-remark-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e43754ce3218fa51102acb6493bd334554e196c1386c6d59eef679f5f45b7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145402 Malicious code in nestjs-rate-limiter-css-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dcf6a5854a71a4f6e5542d6f0514ed512f06a1223cbdf4b3a1eda546dfe031d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146288 Malicious code in playwright-wasat-sagitta-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6025a9c4a34d28d5fef4bf33d34d36f5441114184959e734cd7837e43332f066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148570 Malicious code in test-eclipse-prompts-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565adc0c7206777686a96baffa9365969a46e1d2b689e8a2e2a4253039f35fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149105 Malicious code in venus-centaurus-meteor-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e2a7081640c6d00cd3721b0816361c409eb82efad2b5cdab73e585d1ee971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143151 Malicious code in halley-jupiter-norma-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fcdcc66191a0b741cc743c102587a04433fdd67757aad07d5321a0f3eac3af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144950 Malicious code in middleware-despina-geckodriver-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51bcf9b0a4564225e487b23317e9819ec1bd08d84ecbcd8de05f87a50369de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149329 Malicious code in webdriver-manager-node-config-kronos-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1487a2086061645f46505d0ea84f0fd8978d75ca814f8bd71fbbcb525ffddbe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143274 Malicious code in hercules-ceres-jest-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968504ba2b4fd0f91b0925a1a6f37f0f562d4535dd22ce439ac50ad7e2326765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145538 Malicious code in node-sass-firebase-enceladus-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0ccaa43c4ec5a60f07af0942c0be08f1a9c2f1982ddbd6ee2481c161da909a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148436 Malicious code in sync-wasat-deimos-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b928c8b1e23b0ca5a42a3df176fa0f9a12482797e409ce6bc09d1a8c0636ca86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147442 Malicious code in rigel-websockets-centaurus-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a42e432e68015b338ef2f1b14b30042cd08cea6c9c001efa9cb761aa3540fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148702 Malicious code in toml-chalk-restart-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7520b306eae00850d2361ae42043475f5d647e1b78a8d0d15efd2b81199c3117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145486 Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9188b5e4608aca9ab9241332c97595f1497acd8c7a5c7f5ed46cfc93609c0208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146936 Malicious code in quark-reveal-md-celeste-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5568b1cd7b3d2e9e1d8546d082480728d7f551c9145e3f355500e058de64c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146366 Malicious code in polaris-shelljs-jekyll-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de091a3968f27ce74c81fbe514c2fa98c46ffdd8b63a1a10948c72140895732c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141790 Malicious code in draco-callback-gacrux-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea8ba295da82ad1827008afbb037b09bcea5cb007076459638f4ec6b024ec56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...