MAL-2025-147187 Malicious code in rehype-spinner-wasat-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c2c259413755d91ab2d7887a4bad3620fb777e89d8391c8ead79364d62b8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-cosmiconfig-semantic-ui-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5df92a7b90329406eecee7a3a400b2d62ce2844e17349a089b79a8fe5428888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-axios-babel-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af51a505a4a19960c6c4d61b29c39bdf29636e1200426e6fc09a4c81cb7a186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-xerxes-eslint-config-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3801a510539aee9edbf5ed5b7220556f1c49cf3988e80a0f59c6254164f41d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144031 Malicious code in juno-magellan-acamar-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e99251e7b6d6da522255aeedd0b8687a7e623c19e891943c12469e07c795ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144473 Malicious code in lint-standard-dependencies-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8f31cfaf6351f3bb47ad16bf392d1e308291d0085dd4096e670b4e63b6b8f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149103 Malicious code in venus-avior-hugo-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d29dfc5e2249ddfa5c95e7533072684a991c589d4977145b7e99eacad78a296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144908 Malicious code in meteor-dotenv-safe-rollup-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fe81462178eb9408872f3a68bbc4df7e6583b2b32a7a929f67e9125ec76579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147768 Malicious code in sedna-hugo-webdriver-manager-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2830d155cc9eaca20b67d22d37ccb375f000c8fb86ce6a871a47af6795a59de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148705 Malicious code in toml-commitizen-vega-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6681488f2f6863e00ad9ecfaeb147850e462a4e95077c0e213b618430038ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144900 Malicious code in meteor-bootstrap-impulse-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077869429f1ca60fcc59df622b3ed1c2ae79c5d9f64595ee373a3b164d265393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149084 Malicious code in vega-bootstrap-barnard-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df34bfa4f9162dfd543970ac40778bdbf4311d1bf4d0e034d87cf32d5e11e027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149355 Malicious code in webdriver-mocha-metalsmith-ignite-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f8d1b4005ff300bf85096906929c42441da1b129e398d9053f3b4a03241c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141328 Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e20a22a9c22769398e8739c99b3cb32ee807c0d7b81540638278571f89a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140418 Malicious code in carina-odin-loopback-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a9a886bb982839ebda50269955d0bf11faafd1668c2f4578ee66d69641b062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141992 Malicious code in eleventy-callisto-forever-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447abbef07e2169825384d0a4f6cd21674555dac84ac23aee274c4866a00fc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-scorpius-ganymede-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5285e61f586138fc557d3e0929f99231cfa05eaf4a8ae41d7769f30ebd2e99ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-query-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e862fed99ae944003c9fc385a730be19c4484e4de753e2d75b84bfec326dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-oberon-semantic-release-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0928c9c81d167db71db3f299e5566b1a13b3aee1d5842453431229e9ecbcf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-passport-oauth-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0379683791185467ad7509ea141414868c93f65970bda8b65d73eee3b931f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...