MAL-2025-140056 Malicious code in blitz-pm2-mutation-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9947d7d777aa5109d31e05196cc3ee49ee24d523164a0c11029270bcfcfb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147864 Malicious code in sequelize-deimos-cressida-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e70ccd0b2b0e6bba0ae898039b44edfaf5267da39d9d94a84e53158d0f6ba68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142111 Malicious code in epimetheus-triton-lacerta-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c84f81d63b2a3391cebfaf4fdbf55f15d5cb41615b2987e447e4980502d4c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144561 Malicious code in loopback-readable-meissa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2117bd95d718c11d1d7d6fc5d2cb578836a47b121782b374e510f1375c7c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142043 Malicious code in enceladus-yaml-thuban-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46781eef16c099e80d02af004a2d27414141e970c47df84b2291f9f5e131859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146345 Malicious code in polaris-grunt-nightwatch-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905ca459a3f52802a6a52f4225effde979ef4a34429d2f47835fde85119d898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-bootes-betelgeuse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b326cf2963fd88f54d0edcdd72259d0a59da79d16ffd8a166b7b5e4fd4fa3c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148057 Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a0d45cf85ff55f3be2919cd0287e09e05a4ee46c486cada20e0cfb39b7ef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139279 Malicious code in aldebaran-grunt-cross-env-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942dc7567872d64db37f4d53372787e9b8e5a11a4ea0f476f650bc9815625904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140861 Malicious code in colors-puppeteer-got-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788ee5ebff473dad8df11e086642382331492615ac2e657a5d1576b67ab64f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149214 Malicious code in vuetify-mongoose-ganymede-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92631f0313bebdac04251a58f96b05b250cb622e75007655a4fb1ba9a612cd78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143724 Malicious code in iota-fetch-cressida-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c4f0e250d0f01e37aa7792b1b4a8643a196c2c813a8e3e6686f406cf1d3ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141104 Malicious code in cordelia-mutation-halley-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7711195b3c63d943bd5827b86446fa04c99591895125bf07633ab35cb31fb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-acamar-betelgeuse-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7469440b3ac7a6f8eee981d0de7d186b9e3be1eb14762415ac884f84efec9817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-sedna-callback-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bba612a2c27396bdd6c0082f37a7b31d445c50826d26dc620a866316eefb7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-scorpius-prettier-plugin-markdown-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a773fc88c2d9b6ab604714c0d75d5111b14f44c40a5b5b8f98e02f191aaa20ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-pyxis-arcturus-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdc89424eadb98b9d2b7e8972fd02b2887cfdb4e154f4d2e97576361588fdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140425 Malicious code in carina-rocket-shelljs-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca87fececdbfe1c01f7b543ecf0508dc2cdcadff80d76f5c99691cfd4d27abfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142619 Malicious code in fornax-epimetheus-uninstall-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b1e48bc62209c89160996573d84930ddaf09ff81ca1ad4fb77f100c80e668e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149802 Malicious code in yaml-prettier-css-minimizer-webpack-plugin-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bc65e3e45d0b0fb2609555e9248cc76a7bb27b73e51d498e2ddfba8bbef536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...