MAL-2025-140434 Malicious code in carpo-bunyan-server-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6973f52a63181e3e68ed68ba75c24c59287e638797dd3fe7f6afe8254cc2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143189 Malicious code in hapi-markdown-dotenv-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3293fb2ca9b432971d77bf3217d2e02ba442d2f5f05ff47e51ef92b2ca63b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146819 Malicious code in publish-ultra-webdriver-manager-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add34f45e373dcd2f575e70cf18bc5a1222ee39cbfbd8e89b52cf8773ad1bf2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147737 Malicious code in scripts-miranda-nconf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdaeed21936afa676f6e018d202a8cd6da145ff70e6679d211180c50c08c4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146005 Malicious code in pavo-pino-pretty-chariklo-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad8694ae5e9e2fb525de2a361d94caf1cc4b51939e350ba2974d62c71dff68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144054 Malicious code in jupiter-europa-test-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e37cc939f7b9dd9e11d6abaf23051989e7581681ed85c1f58e2ad2e96a039d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144917 Malicious code in meteor-janus-await-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc9b9ed01714f5ed46a16d16f8f9fecdea619e151dd7ff7dfb534084044ba4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142255 Malicious code in eslint-webpack-celeste-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa12f890f68cbb366704ee095227553735267d49479da3997e9aa7a3e69d9b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148984 Malicious code in unuk-sass-loader-nuxtjs-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98c1aecea27a26e074cbf3b04cb9c22efd7f403daac4a7d58d309d2717a226b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145384 Malicious code in neptune-umbriel-subscription-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458fb1c9c88b8657ff067fec28494d60546f71a745a4f0004bde4c4ed685d14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144294 Malicious code in leda-sequelize-pm2-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6c878fad16f3c94bc36a1465061235960e1dad3e2d0f0950c4459a35f53146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-inquirer-lyra-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4535af8d9a3c92a06b452d941a13df4a198e47bc1d6483cf895bc8971bdd575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-airbnb-dagda-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a53bcc020075238d1989eb6c590d78b229b53dc5d97c211b7ce2577909b8c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-quark-cygnus-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91f4f0b9326fa7246f0c59ab13594a2ac81a525239f0beed531ef565fcc2079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-auth0-superagent-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0608a928572c4b7bfb6946da1d1256c1306c074a7c2dfc451c142f079b1e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-cors-bulma-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe1fa01ee2f04af77ce20ebd02184ddf94ed2d21d9d64f82efe3f412236a439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-event-nodemon-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68018707cd81a7cff1bfc2becc80cda5eb58c8d8c33a490decc2a5785a14804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-vega-zephyr-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02552b14dde06edeef7b347a403a0d5ea395a9d45f99471afc91942b69d47ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140030 Malicious code in blaze-release-it-cross-env-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035760773f3f844c226c558569ddd03e46481efc0be79bcfc58a3adea2384f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149400 Malicious code in webpack-kaus-flare-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e99fda20e82afdea814a9ed77b877a7de3a8764ca4fffd9bd6948b8fd273ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...