MAL-2025-143105 Malicious code in grus-typeorm-koa-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec8ddf276ff22a8a0a69f94799d92ef10703075a6b5070301b7b59216223214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139664 Malicious code in atlas-uglify-js-dependencies-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c01fe1d39d88bf4cd5a8c1ea901406f329f7b4aba7ecd8aabf15ba9c3ada4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-umbriel-jekyll-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64b6651e51a47b909829cd24191a6840bcfe38f5587f4746bf95f39bb809792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-centaurus-scorpius-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3bcd92f5223ed3455308cd868500f9582e6abe1081bf9975ab41468d08a549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-tailwindcss-kastra-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587b9068c89edbc2f8b21cff50936e1ca4e6130d24272049f5bbaf0ec0f0f50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-castor-jasmine-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dfb0018bc45bfd3c2860fceb53ca07e74683afecd202d9deb97e51a929500f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-xerxes-less-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f77ad82d11d28fe06dda99aa8669bf376292cbe56864e2823c56240c757942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-venus-test-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4201069df227c6ed3a83016368b73803b06102600a6f33fd00fa86c969fae75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-pulsar-epimetheus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e11fb22440796e42a2a2d5782333373007b60a5795efe3498f6856ceaeaffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-chariklo-callback-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3aefe7e0ced759fcb278ff76c3e7e7bfaa86bfa349f129514e73a76812713f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-warp-foundation-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da07786b07f1080bf68eef9f1d567aa7e1c425ad990827531418dbb2973611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144708 Malicious code in markdown-pdf-sqlite-zephyr-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195291aa189c6bfdaa7f3956ee1401e30637c563743c36d71d9c6e0cd6aa28d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146014 Malicious code in pavo-xenon-alphard-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7356729064251cf2aab43e7651778d7d977d0c023051b5822ea676f32a6c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142388 Malicious code in express-non-blocking-radiant-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331e367c9a2ee4f71e42bdc54cee6f2118be46b3a3fd2235e2fbec1a7d33c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145144 Malicious code in mongodb-yildun-event-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415b4bae99cc9b1568c32a6c2a8aa3eff44332f1ed641713a550cfb1969e937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148792 Malicious code in transport-lynx-transform-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f627df8c289e0b003c1cc35af435b79b568976165f0a92a17edf2c0d94adb8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145883 Malicious code in ora-europa-tool-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e006f42e194527ca2cc8573e612feb59b34bb39906c9d9544474f1576887f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140328 Malicious code in callisto-cygnus-supervisor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7899891f8cc925ee20ff0796029e82e650d8e993a8700427c6e262950b1045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148138 Malicious code in spectron-webdriver-restart-cluster-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c417cff21456035f8c3ced2baa3c4dadbdc2048dfdb5510a34bfe0d3ee045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146882 Malicious code in pyxis-leda-iota-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c470968dc0f4f1b5769ff5b48425093b4c2b56337f679c2a11b9757d72f10f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...