MAL-2025-144702 Malicious code in markdown-pdf-passport-webdriverio-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30cf25fea46387169a2ddaa6718fe8741c9040928feaa0d19f700989e189e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143367 Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140283 Malicious code in cache-semantic-release-uninstall-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9671bd2f3945f38791b47b7050c3c40a72bdf1f1d31cced49bd57b82fc1f5119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145741 Malicious code in oberon-apex-react-bootstrap-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1970fde9afcf4aed637d9a4801d60378c96b21ba6bd3eaa788e07cea42a98164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147462 Malicious code in rocket-astro-cli-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c472ed77c736a9963eff49b3598afb091fc41500d7bc9f3cbff19ef5c0966701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143517 Malicious code in ignite-jovian-carpo-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5489fcc6a14ec6966ae4d1643fad8c37bf6bca505d7659f928e3f7964fad9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142086 Malicious code in envconfig-sagitta-procyon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf67b16f212ba924c7631f97f60e80217eff08f2b58584d029b03c21095a338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142624 Malicious code in fornax-halley-antares-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8882d047d9a17c01abbde20487bac4f1b53a7334ed773cb36f7e45fd74913c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139927 Malicious code in bellatrix-bulma-postcss-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae5404a833811b66ae189517e867b655010ebf4f69b88a43eab14576f3f8879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142400 Malicious code in farout-castor-publish-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430c0c3a43774fa4675a64b073047be943c2bc19aa6beb0da328c2142b6c82c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144227 Malicious code in kronos-soap-mongoose-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2a7487eb0f4716eb5160cc1c8d601510a3fadcc5d74c85426652aaf1df9303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146993 Malicious code in quito-flare-convict-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00913964ccecedddfe2e3bb060c9fa01178bc6ae6a3380252964605884d2c7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147049 Malicious code in rate-limiter-unuk-less-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f48b7e98a995af2a7a375936cb22752167fb03fc6ad0f8b998f41e42e5bf500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147863 Malicious code in sequelize-convict-wasat-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8a371ffec811bbe299709921e05c8eb65ef5d526eb298988dbcbb38588651b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144229 Malicious code in kronos-terser-carpo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149614 Malicious code in xanadu-virgo-meteor-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c761f603fa14ef1f4f2c2a192cb03b28359feca4a70d4e702e1fadd8d0c5e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146331 Malicious code in polaris-cordelia-jekyll-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92770264ec80fb27b4cd47c4c41cf2cc5b9617c694833736cf037433d29e2078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140746 Malicious code in child-process-foundation-eclipse-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c4f59859c4a243e08dd39070370b2f65a3c8c6d979f8032023e0bd0b311b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149055 Malicious code in ursa-electron-builder-helmet-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dab14f9c372453cd1539810554a152dbae1521576f8135bd17dbf90b01ab50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147928 Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...