MAL-2025-149521 Malicious code in winston-procyon-cosmos-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5551dbc40563853d6ae0acd4a986d5c867b6b5cbaa8947773d0cb09ede006019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139893 Malicious code in backend-oberon-gulp-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f226d67cb720d14461d910199eaa5027444b1d55a2845ec76a5fe3ea4ffaefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141871 Malicious code in elara-css-loader-tool-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcfdab25bdd37fdc86ad0a8ca819d6a524ddae94fca9e2727215f631b725a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140192 Malicious code in build-socketio-enif-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad3112923e340d924bbe9b609468fbed79b3805c41fd9f6c46d9810c00ae930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149121 Malicious code in venus-reveal-md-chariklo-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcade5cf30b3a0402a16ed5fe6a8901df4d3127ad009edaec8965926104d55dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142891 Malicious code in gemini-arcturus-ursa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be3b51231b52255a0f5407ce3e9f0a9f92aca477fdf3217d160d7864bbd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145545 Malicious code in node-sass-jsonp-parcel-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb23bcd2e28f3cbf0db247c4c93ccc0d4a606ec4fab7f1500a5209e6bc140297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-pino-cz-conventional-changelog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ce83330e33af31a4262cebf938f3ac289ab7d0b0a54a9d7e8419c077288380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140202 Malicious code in bulma-antares-update-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da90409dae49766f73cccce1aa6e68c01b0cdeb89095c307fa9ed01a6e3d9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146698 Malicious code in protractor-sagitta-xenos-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375ff0f14b90d3c243abb0c7b21bce0800591a64aa75e666438289eda3647e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142869 Malicious code in geckodriver-jabbah-middleware-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e6d36ee6c729052ef5490e2ccbb9ea74a486340678f9672debe78bee3bee48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139472 Malicious code in apex-aldebaran-sass-loader-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df72001cfaa988d92bc5c2ea746cea8608e30c4aff68bfb47d95a8ecd76cd633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145508 Malicious code in node-config-gatsby-terser-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514c4395cec647ca12feacfcacdd7e1eb406be1f56351267a9f1f798a8f10ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139943 Malicious code in bellatrix-luna-markdownlint-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab87dcd62e2f0e2d1a152fcb986d0c1c03a209224823858cbf463010da48b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140161 Malicious code in buffer-materialize-config-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18db55707488097b21f274ec5371d25d8c58b91c6586082978d0fb1407c73349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146141 Malicious code in phoebe-bootes-aquarius-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce10c3e3d36e1b8880dd58b72e16290d55fc1cd5effa53d778ccb201ffd9ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140047 Malicious code in blitz-impulse-geckodriver-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0618ce967e87623c467784db730cc31e57def2ab1ce14eacec960f92e0a40d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-airbnb-node-sass-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05b2ac08868e6c7fd670b15b48fec5a3be342154aa5b9a86612c8413c16242a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-kinetic-unuk-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b70ff36cf80e77a42f9caa4919b3fe8f4af9895acea4cb758c43cb9070404d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-semantic-release-eris-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0897310f2d4b7638a96531a08b14b6e2774efc0bb5cf2777926f172374a687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...