MAL-2025-148568 Malicious code in test-cross-env-json-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac2776897fa85ee4c9d70fe5522af98d5ad8fee59c900ca63216b4324d8f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147978 Malicious code in sirius-spawn-chromedriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139175 Malicious code in acamar-helios-redis-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4557404033bc3d055e3c2f97b617a069cd6bff099c1ddc4a3a1b79a84dd2591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146243 Malicious code in pino-pretty-rate-limiter-xerxes-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abf532044d3c7fd705ec111e6e3edbb278aef7902b90066d9d00267bcb31a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145411 Malicious code in nextjs-carina-pino-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4608a8302d32cd394e18d23f01b225db5954475612fa415ecb6e02f8021d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146002 Malicious code in pavo-miranda-oberon-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e045e078de01e3ce8c9a68defd2bebe8212d9bf603e6dc9faa91cdda033f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149694 Malicious code in xenos-weywot-yonder-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459589f2935fbcead2d7f29e5333332fd8f5e7a26cb0459b689682edf05048f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146356 Malicious code in polaris-module-quito-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9382084f565f8462c83f796725627277f976ff86d5c8fed186e7f29c8257f92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142801 Malicious code in ganymede-hexo-gemini-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e685f3ac7fac4072eaa0deac3e069d06f956e061bbbfd2b1b7c18bed89b22973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143559 Malicious code in indus-bootes-release-it-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f90ebc335a7deb65c4931a3acab28e00302095cd25fc35c9c9f3136c512ae0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144622 Malicious code in magellan-astro-taurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf0ce6cfcc1944002839109c84e81c317bf8ee3ead756f370ece942286982dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148319 Malicious code in stream-impulse-halley-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f43ed0fe224677a8bd0b3ddeca70ab4093b2d2108e29be6a7fb5bd8c529553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139216 Malicious code in adonis-rest-stream-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c0e08026944655c685f669b561191308ab1cf8228acd1f8005c576fabac4ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-transform-markdown-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2c66e87dee53b643328c06416ae6cc2eacfa3b1e9e1d7a27a2ec7d0e7decb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-jabbah-sirius-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a6470716658ad726613e40f5dd71994615ce5be1f4cab81628934777ffc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-reveal-md-charon-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b37b082f09d00efccc10b37d131440a35f6864abbfa175f1808668340ffc905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-mongoose-middleware-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ef2a72b6763ee7187ed22b8843e8393a1e99887cac99bf5d7ff89efb0104d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-orbit-meissa-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb93c8482597f34bab21322649a57417242e99b962b98baa32604bfe83455ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-parcel-antd-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1953b82391e36ab195a985c26582ab7fb12912a2bf8ee9d51ba8b3e5c2d9d23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-semantic-ui-loop-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5db7115ede80e9b0da93eea8563dc13d2bfba4b5706c69f71dfffd4c7e4703e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...