MAL-2025-148377 Malicious code in superagent-cors-vuetify-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489811e779c7cd64f6303eb95d751c360fc9c8e8cf5ae73a590f8d2d0cd773a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143886 Malicious code in javascript-pipe-docusaurus-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe24f071b8345b4565c3d327bb46b81da8836d9ef89d16fe70049e65458960e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140026 Malicious code in blaze-morgan-phoenix-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f2730776016d8729f42fc992941a569b95e90a52a4a69625b5a6d6d7a60a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139751 Malicious code in auth0-markdown-pdf-jovian-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a5d051ed94e1c11e66965e997986b3294338b4d7ffffc9246f8156b5ac1adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147173 Malicious code in rehype-impulse-webdriverio-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4d663cc2df1cbf1299f2e5768e87b102d9f8ed51c2a21762524f1959577dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139238 Malicious code in aether-prettier-stylelint-umbriel-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcb4c250a746096bf08c2614533edd41b7fc959a5b0076e9c614a1a1be597a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140591 Malicious code in chai-html-webpack-plugin-nightwatch-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faf112d9190685ca2c8327279dfd95f90d5ddf26f8a8c95d805f3662f4bfae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140434 Malicious code in carpo-bunyan-server-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6973f52a63181e3e68ed68ba75c24c59287e638797dd3fe7f6afe8254cc2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147876 Malicious code in sequelize-semantic-ui-farout-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70468bbc99ee37949bf80e5206f0f716f5e6c1e218fad639b36f4c6509f7f251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143917 Malicious code in jest-airbnb-remark-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300e1c61b12b3d1767ab9e42820d1f4b77d4cbb95072146fa11f5d53d1d5e4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-kronos-figures-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb27018f4f80f4bc6b981bd4783b7165ec1289ff35009e4723281ce7b6b0d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-despina-dagda-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab449a137192f276f029ef3c6b3f440fb5830046c09e761a0471ccc9abb43b51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-dynamo-draco-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4159379b4e08c7c6bd86618d3fa0991dc921aa71fdd9fcad571592d2f5873fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-quito-wezen-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beeae429e6485aebd709417772e4bd48dc3a1ea5b5d9bbfbe191a75285b72635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-lyra-eclipse-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6704fa539bc2ce3eacd2e8de6aa93210afb60ab13b460ca98326284315da87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-andromeda-test-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9d4668b877ab5c31a2102a8e1c46a26228af74dd3f9e1ca155bb5764ba8679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-markdown-convict-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27545746f4c3e9130cde3a5dbb4003c04061195eb37b9546b96683d306d649c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-hyperion-vulcan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b341a0c15bb2ca0e6a7ae84ac4e02681230227fc30a00d3a2f1af1c0d6f4f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-html-webpack-plugin-eslint-plugin-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b16fcf80a6746829e48a782bf7568ffbfc1b880338831e4f8a84ff7192a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-dagda-axios-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd44a0f3438ed033d971d6d6adc6c38cdca7d0c501da7a663d61e6e037ad2b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...