MAL-2025-147965 Malicious code in sirius-parcel-electron-builder-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d82865d2c4c118814f34f9e55544cc147c81d7874040ad365913faf99ebac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140664 Malicious code in changelog-concurrently-subscription-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83b2e12272a8e785079ce5d459cca1a904c1e9310d88115531e97fbf868592c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140764 Malicious code in chromedriver-csrf-ariel-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b7bcbb5c91af68f2226ee73e0f82d0975d4f5cb57c97087eab99276a369e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148389 Malicious code in supervisor-callback-xo-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfda6a37abd853c6a5674059cc537dca140630992dd0333122e332486d773c46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149323 Malicious code in webdriver-manager-lacerta-selenium-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2ab098e92dc046b3cba8e813505000228ef44b5a810f73619199c39809807f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149187 Malicious code in vortex-phenomic-schema-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5d533291b2ed88674d84856e3b9d0ddf9b1420895789b87beb95ea87124916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149367 Malicious code in webdriverio-electron-eris-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da77ab2059298b817155b92ac964758be6ef5076d9b7cf35ca406fb0edbc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142635 Malicious code in fornax-markdown-pdf-fornax-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fca9ac077731eb9c84805cd06e984e703d20cf9bd5b748b27043de947b45ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149741 Malicious code in xo-achernar-prettier-stylelint-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a636f624f59c5a89241453cf753ba33173b8230fd2e3d5a25b1f030259959c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147930 Malicious code in shelljs-ultra-venus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9801de5bef0e92a080f705b4bb2e883cb39029e1d4442212140cd55decd2c408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142839 Malicious code in gatsby-deimos-procyon-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1d77642dde07d3fd52edbf4d4476515f45d4e83d6b3392ffd5e5aa7050aeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144725 Malicious code in markdownlint-prettier-stylelint-impulse-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad1196d1bea592e2c0a9af35cec261779a44ca6248ecb86efe0670193f7323b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143727 Malicious code in iota-helmet-express-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42282ed6206029f07bd399aba888e5b4efff6d0382970bd2d500ca5c6b392656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143235 Malicious code in helios-impulse-meteor-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a30ebdf2d02c41b22077fb82b20683bbaf0a69357bc49bb96ea654f422a445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149179 Malicious code in vortex-apollo-luna-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40a7b13b8ae9ef5abf8a3a983d8979e4b96529ff8dfde107ef9f83fa76537b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147116 Malicious code in redis-version-dependencies-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e8aa777567e102ecfa9331f56f1fbd8e6f529afe415a4d19dfb6fae86fb8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139933 Malicious code in bellatrix-cz-conventional-changelog-firebase-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adea7e961cad3c42a45809df4c91724c86fb260d0a3f89b21880d783a5a939e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142232 Malicious code in eslint-plugin-galaxy-xml-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa440b71749d145fde8a670cbb74a95100ff3d22173356b9d0dd9711ff2d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140330 Malicious code in callisto-envconfig-elektra-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7d907eb9367a03573b35691a229a030c56a6e6a51bb48b07f065fb6de0eb5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140491 Malicious code in castor-ophiuchus-socketio-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89628c22eecadb0e3a72e314b6f2162c8d82153b70aa48aa99188ce9a8832469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...