MAL-2025-144946 Malicious code in middleware-antares-graphql-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e67ae35d50289396092b8b9b4f7526ebbf1bc4af417a1c237436cfc78ef362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146862 Malicious code in puppeteer-radiant-proxima-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce0b9b2590e4c2e349e77dd0b957048b4435e23213eeb949b63a60874d6d90f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147100 Malicious code in redis-fornax-loglevel-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f67170504f0ef6eee5c72009ee1fa84721cc1ce0fd73f168822a42262dfc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143771 Malicious code in jabbah-callback-lacerta-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b83b3a3514c3342e03ae6ef7c003766fd44a1062721d488bf938e4f4a48224c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148762 Malicious code in transform-dorado-phoenix-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c06dcd35b1cd056dad87509186667ba2544e0b69410c71587604ce328274f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145870 Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-css-loader-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf85a0c6954af3220d830d7c9c1f03a4cd0ec3ab8e1d39a4733b5a32c012ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139996 Malicious code in betelgeuse-ophiuchus-html-webpack-plugin-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8a7d41267a9cdde6b8ba5d659fbe45a5fccddd9ef331442f4283e3558b4406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-readable-standard-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee74897cb470305c5a181b7888799edaf5856fa3361abf88d8a8e2f0f78bbb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-mysql-eslint-config-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e723bdfeb0ecf0f7b823a7630a67f5018f37e2669440510b547ed98b4e60b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-gacrux-concurrently-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f902fe71cb86fc56849ea755fcc2c4cb1b0f2d2b8b5e2ba0e79f9a3113e4a17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-grus-playwright-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e02caa4a0202f9fe74340d729f4014eb8e1fbf97483fdef1e9ccf1041ea252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-prompts-meissa-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7444d1efb910638a58715c22822c78fba1ee61e841b95a0f0f846fd5a6529fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404eaf3881cfa0b5b7b50fc02a65725729afb42926f6345a7dedfe0f35627d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-library-ganymede-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a50182cb5ce9b9afb3fed1228d3caa54c2a273e7c272ab4b15aead9a5fba33c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-stop-dynamo-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ec4f8339a37679c934d37c9ed98362b947cbb4b526801422f341815e3d4c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-restart-javascript-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abfac630030252c02b3568ca487b248fd80c9ac82e7a38273e620b3acc91c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-cordelia-neptune-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3d9a9fba927e5ca91691c321ca12735df0f533a460cdd3bd694d732f2b364e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-arcturus-pino-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7270b9ac19aad85ea7e97512b7bb3c2f8a2d344649d14905875aeec372a852e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-ursa-rigel-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bfccea257902995f50333344f6cadcf7150cfdd31b9f5dc79dc56a4e1d2a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...