MAL-2025-148728 Malicious code in tool-aquarius-juno-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ae16d041898022924aabc7f30463dde9cf9a13dd7d8407aef91c9a7cdf7be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147044 Malicious code in rate-limiter-mira-test-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459e4c2087053867386e2676432667509cc728c02281ab2bf11291ecf3ce2352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148549 Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a35beeb5c00a5a3c6e78919c6407f1ab921cd1d554cf1886221b360b915a45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146502 Malicious code in prettier-rollup-plugin-astro-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfded479fe2ba4f61803733a27544ca78184e1d770ddb07750a38a7985c66b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144734 Malicious code in materialize-await-equinox-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b788c7f73eabc1f4be55768daabef3d611044ebbe93e7a4baf4947708b24a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145882 Malicious code in ora-eslint-config-gemini-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcc24c27025a5441e1c4b98214d4687b5681a0e5e0ffa0d6616f4868e1f2e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148468 Malicious code in taurus-exec-javascript-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdedd5376e6fe1861b11be01534bfda0c690e573d66adc4218268940bdf545eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139863 Malicious code in babel-iota-command-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4053b964c04b56158ec8a42e3d4cdfcdd483167161fd27455c1a449b7b31160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143572 Malicious code in indus-passport-oauth-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0379683791185467ad7509ea141414868c93f65970bda8b65d73eee3b931f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148496 Malicious code in telesto-middleware-dactyl-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e618b3a34a547058845867335ff5346d818e294aad90c6623367b21f87e2e618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143354 Malicious code in hexo-spectron-webdriver-odin-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3a63a8df79c8649d7f26ca43147682855e88d1324dbac739a1330840977e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144476 Malicious code in lint-winston-schema-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fac4ee9fecd205ce5a6a0d6f2d2fff5c73dc9b66e1cfa9181d4316724a6a246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149564 Malicious code in wolf-slides-nightwatch-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6fa277ac69bd9089da09771fd17d8924184412af68db60a37dd1a2614aa09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140132 Malicious code in browserify-meteor-exec-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7097b25471597433a406c160c80c2b71d0f76c3ef49421322f2d34b31c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148048 Malicious code in socketio-dotenv-parse-variables-phoenix-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f285ae0108295516b5c1f0e41ffc8b87b87b1514787688973dc22937e53471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142700 Malicious code in frontend-carpo-yaml-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cc2702bf536ac942f0062c5a6c776da5fc9a135b93382df362258e62dbb975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-superagent-non-blocking-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8ddc615a56e7e150a01de9f37fb83d259b5816386456335a484c9eaeb10f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-command-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f12398e16b7a7d7fe6846b979eedd67f002e985d6831deffbd3e08f3b1f94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-dependencies-geckodriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801176c7498c86258fc33864d1d1a0405d7ba7062ec8bb2514017ee4e04b7f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...