MAL-2025-144391 Malicious code in library-transport-iota-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2344ee38fa070a53a841bad9565ace23b620ee3a3f80a0565f958d36b582ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148899 Malicious code in ultra-init-spectron-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad226bbd37d46411f9e7995bd9f5fe514fe041d07fd02d014234018cf2df8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140192 Malicious code in build-socketio-enif-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad3112923e340d924bbe9b609468fbed79b3805c41fd9f6c46d9810c00ae930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139606 Malicious code in astro-geckodriver-radiant-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1216b3a1e626ab6c41d61657716dcfc1cd91b850838bf188bb8923d43e525c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149811 Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144393 Malicious code in library-zenobia-native-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9620d5a9059a59c24af888f0c640dcbdd31ad3e5c571b59e3b1c48a9264c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141149 Malicious code in corvus-despina-spectron-webdriver-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcae3f6d4ea7e4a93214a5c60527bce4d58171d663259f9c538861ab6ebe971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148138 Malicious code in spectron-webdriver-restart-cluster-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c417cff21456035f8c3ced2baa3c4dadbdc2048dfdb5510a34bfe0d3ee045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142299 Malicious code in europa-webdriver-manager-jekyll-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a7da46a69a160a1fdd63a7030f032616fe4f7f020371a278975b7d6369a19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149734 Malicious code in xml-relay-jupiter-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20d6a9cc34ca95f2b1723710465fc3398f80bd0aa4f0419a2f86ed70baae5e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149804 Malicious code in yaml-tailwindcss-hyperion-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21873df11411c0e983ae620ee75aa54dc13b86929ca05c9b2f03b64c18324d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148623 Malicious code in tethys-mira-csv-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92e07edfec104f27c0d5def85f67861f7dd01686a1fd7615be4a2fb1db864c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145144 Malicious code in mongodb-yildun-event-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415b4bae99cc9b1568c32a6c2a8aa3eff44332f1ed641713a550cfb1969e937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149806 Malicious code in yildun-antares-mui-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b10b5e93a26dbeeca2443fc906e35cd7a1c3d3a6f0ebfe158c9a50ca3ad24d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144065 Malicious code in jupiter-tailwindcss-unuk-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6604a27476f8c7705bc350f742b566022ef6f23c269b2a748a8f7204e54f0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146819 Malicious code in publish-ultra-webdriver-manager-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add34f45e373dcd2f575e70cf18bc5a1222ee39cbfbd8e89b52cf8773ad1bf2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140399 Malicious code in capella-webpack-octans-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea13fed971b35e318779039c5923c8814a765c4da9f17dae660f687a3960514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142001 Malicious code in eleventy-kaus-cz-conventional-changelog-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04bc3d838e3b526c2689e5089a00ca9f5609170841e9b60177b38e98d61ab92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149350 Malicious code in webdriver-mocha-jabbah-csv-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42546448faae6a4d65c744b2b68f7c5abb36c64e33b66466ea0e22c898a9363f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...