MAL-2025-140753 Malicious code in child-process-miranda-enif-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449b12ea44d1088d4d1c3ce7d03a217f14aaee1ae74cd8d63c96d1fb16916fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139294 Malicious code in algol-dione-markdown-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85222759ae1d90c0ef7fd9b7ceaef96a1b0046b114316d86b790483370a812de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145925 Malicious code in package-bunyan-uninstall-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927e4554a71f66a6a4f439906cade05f79691db231a52561db5eb5d1eff4627d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149691 Malicious code in xenos-thuban-resolvers-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c87583f813bf3b289010d2d1fe63c705d1c7b1a54fd57decd0f17f40b0c5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149137 Malicious code in version-iota-deneb-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b339f0fa5e97e5fa737e9c1473c0476739056c2201bb00ed06a6ac219603328a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140509 Malicious code in celeste-impulse-private-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561829010b1dd2399a0da8cf1d3b0989a0adff576be915b99df64aeae7651dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147689 Malicious code in schema-corvus-bunyan-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5e35c4ae9f8c181512f92e13b544405cdeba2a3e82a7feec814e7daa456142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141066 Malicious code in configstore-titan-spica-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d4323dfe5c95c01f1b85cbb867e70a807bdfd1bf229b6f11b8e1feca94fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141200 Malicious code in cosmos-blitz-got-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cab308e3dfecb0e0f1d7e5a6ac6a093767de259085409cb5e48b1f410f5560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139886 Malicious code in backend-exec-readable-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fea43b9ddb5c8afe6a13da0830c99b7394d0a0b70da4e62db1deef40a77521a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140862 Malicious code in colors-registry-bootes-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96ab8b439374483af0e747643273de16e3edd479811c0743f9b3bba63150c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144779 Malicious code in mdx-sirius-buffer-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264cb34d314b13266791985fb1072db94210b9a991abcad1984a90978870dc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140690 Malicious code in changelog-upgrade-native-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985c3ae2349fb80095178ca8c1c3d0e0171ce3f14382f0bb8265bbfd705918e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148834 Malicious code in triton-xml-ganymede-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c77b434f8e70b60ed9b41c1eb361d6c28e453ad16bb1bdee7d41360d322ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142886 Malicious code in geckodriver-uninstall-husky-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a2b7f6230965f27a6954f78531a9e677cb5f7407f313086cab21ff0979a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140374 Malicious code in canopus-spawn-quito-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da827a28fd41036739f4226ef76721a4ea637ded5d31c88566deae523cf4242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146066 Malicious code in perseus-apex-nightwatch-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c57b286ddc57ae54033c79eb592e88344baf226bee98b7710e1289f2c944189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148495 Malicious code in telesto-hercules-axios-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ace812daff57c69b2929734f5e4dcff2755e162c1bb4d9ec8ccb6978d5c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139876 Malicious code in babel-xml-config-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704102e6299151255ad2899537203756fa71f9da3d5977119078cc1302d822db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...