MAL-2025-139645 Malicious code in atlas-inquirer-jabbah-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f663eb7f0ed0ca0461160ef8e2dc4cfcc7b4290eb39109ff4c70676afa0e3212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146879 Malicious code in pyxis-juno-uninstall-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598f75f9bebce3cd6831090987228fe25f65a87b1121c7b3ef723201507cdf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142577 Malicious code in forever-webdriver-mocha-testcafe-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97be0264b0bb5094af68aea6b2b3948642428c9ca9efd84ddf15d7ab02acfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146895 Malicious code in quantum-avior-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140509 Malicious code in celeste-impulse-private-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561829010b1dd2399a0da8cf1d3b0989a0adff576be915b99df64aeae7651dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-blaze-europa-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2187e3df5f25fa89e7d582ad2b49cb8dd54a88d1dc8b42e7694934d80e7d5b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143449 Malicious code in hydra-pavo-taurus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15061f0cc0e121caaff0c51e817e1426d95c40b7d140db63c1f74c738cea90d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141080 Malicious code in convict-mocha-castor-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf50b62bf29b274dcb258f4cbd7260d8799e01d06ed3dd44267be145c4590df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141602 Malicious code in despina-octans-metalsmith-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9384bbb9fc0aa0e1f16a71cc9464392c53182e411ef298e21246033a29d53347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141124 Malicious code in cors-ganymede-charon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86ca30bcc45566802cc10a865760b2d98563b06c250bedde4d30bb7e523d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142399 Malicious code in farout-blitz-yildun-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7ec6924a4e3e3a69ef538be213700fa6c9eb4b713ec06552ec0ab4a7fdf741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145935 Malicious code in package-lacerta-flare-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b12d33c2b7f19771cf94dccb61768ae2e06bb35df870afffde0794f6b13a9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149626 Malicious code in xanthus-hapi-buffer-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daaa6f3120d4666fb5bf52550f2bea95213da7f8afc741f1360119204f1bfdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141560 Malicious code in deneb-ultra-process-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf421c8337829ccd7752197bb60c5b21fc674b453bfedc4a03db7644b960f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143738 Malicious code in iota-proxima-luna-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032b46a7c35878764942f46ad73a78e19d4faf29fac6187e1e079f0b21057aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139656 Malicious code in atlas-redis-axios-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5089f5ec78918d36e8cca7d30a931bb7042a82580de245074e00faccc56ed2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145995 Malicious code in pavo-delphinus-winston-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce9c55cee6479719563af79bac187704a0d56888847f9e09197a480e90cf749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139234 Malicious code in aether-mysql-eslint-config-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e723bdfeb0ecf0f7b823a7630a67f5018f37e2669440510b547ed98b4e60b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144093 Malicious code in karma-aether-betelgeuse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22bbc49c685a44aec9fe6c306cb5baa37e082c4a9492ccaf2e80f03045c3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141769 Malicious code in dotenv-safe-pino-pretty-weywot-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0660d191b8889bfff42b4b24d6a2b80d53d8a238e8d3863edf6dfcf5780199a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...