MAL-2025-148057 Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a0d45cf85ff55f3be2919cd0287e09e05a4ee46c486cada20e0cfb39b7ef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145561 Malicious code in nodejs-dependencies-unuk-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071fc09dfbb31483cee6efe94d252e17936fa2604f6c450ed55d774c64b7e440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143634 Malicious code in init-wezen-umbriel-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd116e1696c115501f7f27dbb047db3682247fec5c2456bee3ebbbf563f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145140 Malicious code in mongodb-server-yakutsk-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dcaba764b7d0683fc08db311198f703cf88073de862611d3f71439e3a4ded1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149674 Malicious code in xenos-cypress-ursa-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c7efb0dfd9e0a603887b643409249147387ea0015b6b38655d3aa6b494df52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147313 Malicious code in request-standard-proxima-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf15901a2ba9ef710de697080fd395ee49e41043ac3221f28f48d31e2dd379f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147075 Malicious code in react-bootstrap-socketio-nestjs-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592138fd44852686e120f16bbef78210aec4400631292160c14d54c5156ef1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144928 Malicious code in meteor-readable-dactyl-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94388570f96da505278819c6e146b9c7c3d8e2e1288e526202fbeaf4fb4fec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142591 Malicious code in fork-juno-link-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5851779d975f0f23b872722829c51245198fc88dd1c6a17deb0d272d4ece99f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143769 Malicious code in jabbah-astro-update-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb48d05c71d4e664abc9f344c8ae0080f7d1f437b56a3bfa83439c01a3b1374b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140276 Malicious code in cache-mongodb-oberon-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e800145a0cd744f6884e1491601dd0d0e4bb5235ae6f74b6e7ec2fa7f61cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147122 Malicious code in registry-csv-corvus-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8533a9b1ca45fd27e66682a0d0a0ab2095d395ab5a7b5b0e0ec55e3c98200d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146126 Malicious code in phenomic-ceres-uninstall-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e46df6ac51c8d7445b7bd05abfc596bad25b952eaa26ab0106c78d1ab1f3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141507 Malicious code in deimos-semantic-release-atlas-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d18dc8dcc795d30bc08edaf90ad56deb686efefb24e1006e8391463234d5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142045 Malicious code in enif-cosmos-soap-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe0f54fbc6915846fb2b13a32feffed132c1645ae6588717350c5848deb52a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148097 Malicious code in spawn-gemini-mongoose-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538449fd0956eee408cef5ac551636c4e3e51f952b988445fc27d61f1cf38fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142108 Malicious code in epimetheus-solis-perseus-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415a02f6ef7c9186bc59da0060c5f4eb21123c0ea1bd1513028d932bb8964e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147685 Malicious code in sass-loader-xml-altair-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602f04ec56ac19f9194b5ede251f2d95df2f758e975cc2eb78ff7be59af51050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145195 Malicious code in mui-betelgeuse-chariklo-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300f12d26957e00101409aa7e0c2cfb856fd8a82c85b7b2a264cd249f286106c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...