MAL-2025-142224 Malicious code in eslint-pipe-rigel-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945b68e2b23a41cfec0080ab381b2aefd14282d4ee2b94a35c51bdc20dc5ea90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149676 Malicious code in xenos-framework-semantic-release-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcfb6a70cc74a7a285327bc1e80fd2bde9efb27de6de8ace88cbb4fd7376aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143797 Malicious code in janus-apex-writable-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfdc92c35108b7bac99e9f035fd519cc20125241b0a253c8541000e44936d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141764 Malicious code in dotenv-safe-non-blocking-bellatrix-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f3a0f41e22eeffe8e03617d54458f2fef81c61cb1d871598a3c4f76542fc27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147968 Malicious code in sirius-prettier-stylelint-dotenv-parse-variables-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611e5e66a2dadc8e4f679552552d528775057968cb7051d625d46e870b5fd204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147476 Malicious code in rocket-phoebe-norma-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b96ee1261f193a70b7eb7bb78cefd12edeee6d534a331c98854f83aeddd3e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147384 Malicious code in restart-loop-quito-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b08b626c1b721e934cc6da12eada881e281233c8d27a95f2ee119e8031a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147339 Malicious code in rest-andromeda-ora-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a92c88fabf7123e7ffb64c069cfb3f6a546e509857b2531c764b7e04bf9748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146327 Malicious code in polaris-cache-geckodriver-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabbeb70ac312a861cee080d883f38c47e8b66b9d9798c90eda84e2aad74baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139638 Malicious code in async-vega-jupiter-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64c3ff0fcaa999f368800299f9e3b6834bddc93d44ffefadbd20b354fdb971a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145964 Malicious code in parcel-markdownlint-start-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4558d218085cbba3a719f0a8e2748b8af97f88eb3804a1948c42ee6ce42aa2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143602 Malicious code in ini-query-bellatrix-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17868109012618c362d16e0753aafcde22ed72095743ee03fc5cd4f777ae66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140898 Malicious code in command-child-process-perseus-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3677b217765d5423fe859eadb36db03aa7596c2d9df7972ea04455361e5815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149340 Malicious code in webdriver-mocha-airbnb-dagda-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a53bcc020075238d1989eb6c590d78b229b53dc5d97c211b7ce2577909b8c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142437 Malicious code in fetch-chalk-mysql-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb1790d821ab22ac99c85478c2c0c64e0fa842b8042826889b140dcf3a613c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146543 Malicious code in private-slides-postgres-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375be66b5a308c568af9c49e1f0e9f44a28b23494199dd3e641cb2a0f1f4993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144127 Malicious code in kastra-pino-equinox-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda6bdcbe3cbb6ef8ab1bfa09ae585d6cc0e53b722c68e483091d717214b52b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147640 Malicious code in sails-configstore-umbriel-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07c63636c7adf18d4ab98086313fd9f92d35fb37e9ec0982f061391b017a133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141993 Malicious code in eleventy-csv-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef3bc58089df1fd8c787fa0c6b3f40c2656d4f1cf48409ae9581d82d97c9558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144534 Malicious code in loop-scripts-koa-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8bd7851dd59a18465c76cea03c8ddae5cbf1b88a7a03c3e87200dc9451156a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...