MAL-2025-149720 Malicious code in xerxes-slides-semantic-release-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c9aeb4ad6ee9602aa39fd98035a3b4dc787423994528a4f7d5bd4c50c239de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144303 Malicious code in leda-xerxes-farout-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0673ffb4856e4955334686e0e25921ea6b7a948d123da5b7e488cf720f135dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146471 Malicious code in prettier-nightwatch-request-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae148927e5d7b7502bad537bf67cebc1408a2573a7de2260fdf5b06c39e274e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143930 Malicious code in jest-pegasus-nightwatch-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80191c082be44691a67ad5ff841fed6a08ac9ffa96a49ed27afc0eb1c8dc50eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139750 Malicious code in auth0-kinetic-halley-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d235ed679c71a9c92ea843e98ce02b27b0f5d8037cee666eeb409341bd9bd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146429 Malicious code in postgres-canopus-supervisor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0ae963def08804b0e22002cdc6ddc6c066f05c1c505b3acf66c67b8716c8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145092 Malicious code in mocha-sedna-css-minimizer-webpack-plugin-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8604a20f4f2d848230348bc9bf7b4018a8578f21adeacab02ee39ba2a9d08702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148405 Malicious code in supervisor-superagent-helmet-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a59e3ffa2586423c766bb07341d62b23bc98f8b2d7e8b30bdd63d44e487e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144992 Malicious code in mini-css-extract-plugin-redis-tool-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c76cbb410313e8695796c355998093a7f80575a0ef4bd8350a10b4794b4192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139325 Malicious code in alphard-halley-run-script-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f9d77e7486f19b392694db7b12727b81676372ad5fac67df6db7cc8e333163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143994 Malicious code in jsonp-configstore-janus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6491a1ad6532064b4525dda0546ca266738df9e868bb54a32043160081b02742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145855 Malicious code in ophiuchus-zenobia-passport-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eca8c97cb6ac0779080fceb9527f7442614f57c2e63e5ddc7208cc5d617a013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-polaris-semantic-ui-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f909b3a7f01141b9fbacc667aaf91d800373fbdfde86330fea106757063bae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144363 Malicious code in levels-spectron-webdriver-callisto-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f588c6a8a810d94b41a205dab476989bbd997b1a75838b16e70916cce569fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148561 Malicious code in terser-webpack-plugin-yonder-venus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2b3d037e70244b804d90a4020e49f5d066dff3fbba1539e907521aa5f8baf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143795 Malicious code in janus-airbnb-cypress-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef687ca2884d2bba22a48f61152dc867f2c3c8ac13c2de55b344905e54e3c862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139540 Malicious code in aquarius-mdx-parcel-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6a19028e86bfb9dcc6f5f0eaa284b5bcb2698b973e93782079cf771658fc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-avior-sirius-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea92913ca746cb08deba1e9521afb260165ec52b0ff7c0cbbe937855ba8986ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-hapi-eslint-config-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b0ecf467e4e7f27d78ea151d34cd5034fc94e10302afbc83903eab71ff875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-sync-server-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360ea347d49054e737fa0d927f21614ca4674a8d5404c9eda5d45d307d5b07fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...