MAL-2025-144464 Malicious code in lint-staged-pyxis-webdriver-manager-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc50e3aa929a131d682c28618a24b80bb1df55cb791d02ab06ddbfd580f66fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147540 Malicious code in run-script-changelog-publish-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90543340762c3dc3a715829b13e8c3f5016889801d840eba6365aa107803080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140140 Malicious code in browserify-readable-mysql-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdc48c23beb6dca987010f9cde20f17059008b360afeca9729396198f89faa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145090 Malicious code in mocha-private-cassini-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc82190d8b17d1f57a30e12ed75fde26ae8e9fb09897bcb4bc0cb303e68b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141962 Malicious code in element-ui-ceres-aquarius-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54814dfe23a781cb3e4bd646a7076f4328a131fa2f85effb56c7c81ba91163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147421 Malicious code in reveal-md-passport-farout-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42df2a17816922455d422894949135bc0c3aed262172e07ececd4836aa13cb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139873 Malicious code in babel-standard-nightwatch-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3bbf98de347e5fbf986b9ea736e9b2918562ec8c586a4d122711b09dbd8d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146989 Malicious code in quito-bellatrix-polaris-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0332c27cc5eaed2686c971201590aa7f14bc67ea3b5004f6f6a1d5b9f1ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143293 Malicious code in hercules-readable-xenon-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44ad932f34bf96ece8178f87b5f7a03046958f3e909aa804cc780b75f2a85ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148310 Malicious code in stream-babel-procyon-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17805e8f68002c08e621511e03babfa0960b074faf4f74330f9002843505179a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141579 Malicious code in dependencies-request-private-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9eb5412192c45323c5da75be6263a84f0ffc0061d8102030656c4b59e9c859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145143 Malicious code in mongodb-winston-jovian-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ccd23e9b09ce25258d0121da16e8571c37e336c93fd86210692a951a107288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140246 Malicious code in bunyan-levels-event-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af42148929b6b5fee816c0a3fe4dd4a05f367419a359e414340c8254a533528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141376 Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145895 Malicious code in ora-request-io-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9b22c5b28831c6ab3fe45a56178c6333278db25389c2d08125f9f6836adeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142362 Malicious code in exec-thuban-farout-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148565 Malicious code in test-cassini-luna-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cb101e3f9934846779c5bd46578227d090a1610d7d751f4941518c0b0295c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143697 Malicious code in io-gacrux-test-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146490badaa1b12611a8763498d0c26ee5d80e1f64f417b1d5b7cc98eeeaabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147733 Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140558 Malicious code in centaurus-websockets-enceladus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4fe990f20f5b2bf6fbfb73edd295ad5982a6f4f9067dbab39d5b66f8ba8176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...