MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148689 Malicious code in titan-oberon-restart-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f54b199c3e81770e49604610ad75bea2f44c7dac5b78f4cb3c6f6a4ce64a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145231 Malicious code in mutation-rest-mongoose-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0a079ebfbf35826223a4ed7a0397e374dfc04468205ee22c2a20a8b5d25fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143167 Malicious code in halley-soap-cosmiconfig-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878f47aabf7c8d166e8bf83e6a92ca0f1d56d5ae5dbf7edab11cd99f50c7502d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142964 Malicious code in google-juno-toml-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c95295e519e35ecd2d623f7afac167f03d8dfb51ce411cbc4ef9c11a77bf1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-install-hercules-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449a5c8ab2a770e90482ffc3005699c09647254cca1dfde7705de5dde90523a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-arcturus-charon-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08baccd9d82c30e5e6c477d773783cfbd6d66f0cf6dca7d0451eda1e7cb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144537 Malicious code in loop-virgo-impulse-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f7baa439a7ef55154ee9b9254ab2728fa7346ccf937a84ab806d616b5b3e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143747 Malicious code in iota-umbriel-webdriver-manager-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6985abad42d26bd68fbeb023ca6e733a1830b93092f21fe9c4b8cd966ad3ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147745 Malicious code in scripts-quark-antares-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4a6dba39b156ce3c014140ded3e32be802ee8526b3557b23172727a7bac5b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144861 Malicious code in mensa-protractor-json-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef0cf775eda6da5ee72ec9ec108786c8ff2381ea7d373895eed288b9c05b03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146540 Malicious code in private-radiant-cosmos-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1db17bb2525ea074c0d796c001b79ca20438eb3bfa571940a2c395f991052d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-foundation-norma-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49315bb63638761a8dbd289a4cf8e22369803d71be237d59224742f28f2b071c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147932 Malicious code in shelljs-warp-mongoose-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6018cc36beddcfdf04b6db21a67f004b60c11db09ff11b6a4015d3b06e4f15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-colors-private-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2016b08d398ea500476ae7f3915149632d7a439309de048e028ac5181209428f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-pipe-hapi-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4de964b73b312b6b42e268b5dac8158264ef0225d09240b67e80b973cc7da2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-tool-materialize-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880c386cf3345ba34aef43fcbad885305ac968c3ade923f78e7cbd093c693f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-parcel-redis-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8737910321436372bca8d38f497a31fb2acee520e194687fb5c3232ad5fc9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-configstore-blaze-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ef9581ec039be05c2e51e371aefded911bbf723162e1103e5cc9b7d919b95b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-pegasus-lyra-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35707c164ff23efbd67fffdf2b796d89838d08e530f02d8a1a53add5a853e96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...