MAL-2025-149178 Malicious code in vortex-antares-axios-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496fdcd645392ce1ce737d33cd2884aa6941d8a60e4abc6055eabb6cb9fb6e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149503 Malicious code in winston-jwt-sails-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb006c2b2793dbbcbe5f7a7f5b52c5850abecd1b69042e481b38dc15078b81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141806 Malicious code in duplex-cordelia-package-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a47f8b83976df66ae9b976c653e1764b754c951968fe16a3f6427293092dd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149278 Malicious code in wasat-acamar-fork-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e19bafd009a01b2b23ed912abd7ac1dbcdbbf45e8f3b3d1f2df9375ec17703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139658 Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140157 Malicious code in buffer-gatsby-less-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17d501af7a70b3a645083209e4b5ddb87b03d3ea34e7427b64b6b2c2dc89b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144325 Malicious code in less-loader-phoebe-scripts-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0453a8015b61b94e10fc0eae56409daed68846374d696e999e769cf556719508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142304 Malicious code in event-atlas-spica-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067b8b530c373832061d5f175a4d881584493dd9a7b8a77b32796735fc9af307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146275 Malicious code in playwright-chakra-ui-ora-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb0266ca44973e7f581a1ca837ea2cbb93f27166c19480130fdc58761e03ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141187 Malicious code in cosmiconfig-mocha-mdx-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e6409a70557c88c22b300d1eef3de7cac56caeb40ddfd9f8c457ffa474cb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141179 Malicious code in cosmiconfig-eleventy-nightwatch-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5e46a452ac9ffbe7beb92ebda72ddad43802f7244ac85e3f7a8ec33bc92392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147952 Malicious code in sirius-foundation-sagitta-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3ab63604cb13b980d2d70c5b2c199f034d114cdcf1aa758bbe94394b8f2ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147574 Malicious code in sadr-process-ini-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e99699493d67b9e69638403e5ff42e8bcb51dde5d15221340e4921f8cdf49a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141633 Malicious code in development-slidev-dotenv-parse-variables-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e91385d709f1ebeb5eb823a58d2c7ac5ea313806b2484573755491b88a2892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145698 Malicious code in nuxtjs-bunyan-semantic-ui-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd493b6444252ebb7f13960207c5a6fc44761154b0d5e7d19243645018d14303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140163 Malicious code in buffer-nodejs-native-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdfe7b627e6dbe13e573500c4bac8abb0660f48ef88bf69c58ce61ebef05e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149364 Malicious code in webdriverio-bellatrix-capella-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8417ef4c5d84311dca2374da8d719b1f2a3b734c4af2cc3ca9fb35674dc060e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144947 Malicious code in middleware-barnard-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ffafd3b6e043d42bfa7dbb3f79f69ac43015f66786a1e96366df41603d8f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139261 Malicious code in airbnb-prettier-plugin-markdown-envconfig-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0198af1fb6462d3f8e5ce2368641d7f064cf2cf867bd7a3eaa7300c7d290ab3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-quark-middleware-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5904a73a97ab4e110d68c896be2b1a4b127e1de6de120003269bf3fdb442bc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...