MAL-2025-149043 Malicious code in ursa-auth-bunyan-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28eada95a2466abcf6454f804708ecb9d74a085996376d2b7ffcb5ca0835786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149349 Malicious code in webdriver-mocha-grus-zenobia-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f7a9cdf7fc488f0521552c98a014b1654221c8d0232d763a1a6eb14445b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148286 Malicious code in stop-aquarius-barnard-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c424cf28debce1410577b469e5847a0ac3aa9b77d2504b807a03608e3d501ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141371 Malicious code in cygnus-jupiter-markdown-pdf-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7edb7d85694a3c456255640009a7fe882ffd52efbc00bf4ee4c78c1d16712c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148471 Malicious code in taurus-lint-andromeda-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22aede6c54725dc663745ea8702cae95b5545630e7dc96af364471615c2b017c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143567 Malicious code in indus-install-procyon-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4c20f3b514ef8beb31576a698a1ff40f0b35429dbaba3b2cb6943a420f581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143864 Malicious code in jasmine-query-yildun-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f632a3252972241dee863dd75f02b97f510ad5c332e9f6ff8b2dcb5eb89a139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145866 Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fbe1c2b2cde5513e863fa8fc192ed8bd1e1098a5964c8016c02142c5a7d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145684 Malicious code in npm-nodejs-umbriel-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c976dc4e8caa65dad055cd3ea3b6bd8738c7eb21895548d493f81de4dcd32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140537 Malicious code in centauri-selenium-cordelia-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5140bc05ac5e03f10bf4b67fcf844a7fa3bf3d15c413dee6007aac2b0c81d250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149689 Malicious code in xenos-run-script-weywot-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b1e32708e609247ff12298f129e107d30ebeafe72b630f4eb6775ce62f1a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145665 Malicious code in nova-protractor-nightmare-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b9e415757c6071f6593050f97c59f34e49f7c658690288d860be19b3ca16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143564 Malicious code in indus-fork-rimraf-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa831a89833772caceac7a6c6708f1dc1efc4af5b76d2e7f5c29c49b52d87fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141210 Malicious code in cosmos-mutation-eslint-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ba4c4ab2fc046a741a48a61fd16f22d5f146a6b58e777157f13f0a8aad1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142748 Malicious code in fusion-umbra-farout-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2276a1acac285c4c61c33b38733d0141742a73f31ba16f4d787ec835a352f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144803 Malicious code in meissa-europa-forever-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8907b0323156f50189214fc22cd49f2c00cbbef7df9bf25c4388076a13ddb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146689 Malicious code in protractor-markdown-pdf-epimetheus-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e913e8e88606bad29883aeb6ff037fcb4ee1f10f0bb20215bf29faef5969323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147172 Malicious code in rehype-hermes-spica-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e1ab807813a01c2201c44d4da4a0a9147d82decf9479bff0a1ec89c7c4f72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142471 Malicious code in figures-ignite-typeorm-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba65ca8d3db100e2561aed3aa94db75191efee78aa8dc130f06a757666bd98d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140824 Malicious code in cluster-dynamo-morgan-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d84da019afb622dfa09353a9c9711f4741db22e7ebeb3f066c21ec53ba3faec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...