MAL-2025-140295 Malicious code in callback-avior-apollo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bac3e861534cf5cd11bb2bc5fc8ff37a0ada127a12c7e2e75079a7b7e03fade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142619 Malicious code in fornax-epimetheus-uninstall-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b1e48bc62209c89160996573d84930ddaf09ff81ca1ad4fb77f100c80e668e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142304 Malicious code in event-atlas-spica-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067b8b530c373832061d5f175a4d881584493dd9a7b8a77b32796735fc9af307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148049 Malicious code in socketio-draco-blitz-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148831 Malicious code in triton-webdriver-mocha-hercules-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c377541408e4dd2d0d9420417ccf43e9296fce7cdfd3020e459e556e4478417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149802 Malicious code in yaml-prettier-css-minimizer-webpack-plugin-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bc65e3e45d0b0fb2609555e9248cc76a7bb27b73e51d498e2ddfba8bbef536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144001 Malicious code in jsonp-miranda-carina-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb65ee6b290dfabb20f89f3792d112be79a24a474b795934b0a4e2874830057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141888 Malicious code in elara-rocket-pipe-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ff2f73a968804fa97093b76b356f86a3c51d62f7c7b520c02d5fd837aa8eff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144339 Malicious code in less-mocha-slides-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb08e378fd5b37897cb55692109f14c77a0d01eb08201a44b838e117a48f037c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140425 Malicious code in carina-rocket-shelljs-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca87fececdbfe1c01f7b543ecf0508dc2cdcadff80d76f5c99691cfd4d27abfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144594 Malicious code in lynx-iota-cz-conventional-changelog-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1652856c44e9fe7376fb9868f2b409d579a3e47c2aec587f52af141990bc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145365 Malicious code in neptune-kaus-xanthus-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fed4bc4106be635c7d21bb98b4b77053a3e5766f1ebd1ecbddac9415f6f11f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143839 Malicious code in janus-ursa-rimraf-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fa8467d781bb8828c170ff1d24643e2fc2541535f36c7baf5fb0ec62b92371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149524 Malicious code in winston-reveal-md-betelgeuse-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5353a675fc71a6f7979ed34bb601e42339f6f0c11956bee5628b60cfcb84881f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged-tomato-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7c3df03d5d11071ece7f3d6a02d6d287db936e19a518d6b13433fcfd3df1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138901 Malicious code in nursing-amaranth-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503f9be6089338f89c0efa27e1dec4c55bbdbff9f241c775be7e311d99e84a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous-beige-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c394683c3a56d492dc7a409254c3ae7d7f5000509e733976b71cdb97b8dce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy-olive-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fe395414a455d1f5ee1d3f47b24fc95e181fa1989275b8438058bb45a61f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-beige-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4ed90522d6b1861df6a619715ef2cd213638a2fd3371105429e7af170f81fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139086 Malicious code in unchanged-tomato-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7c3df03d5d11071ece7f3d6a02d6d287db936e19a518d6b13433fcfd3df1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...