MAL-2025-144506 Malicious code in loglevel-cross-env-exec-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e94b7d7cab06bdad4b51a0677f1d821f7d50928c6d6eda557a6e75f8ad54714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-meissa-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8770522c3fd3f632c35f7721e8ffb1be3ac635d15c09b8d80c5fe9c999b844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144774 Malicious code in mdx-react-bootstrap-javascript-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e1744c55940a789327d9b33cc8d592c73c78aba0180a6c3d6f4db1c9a6d740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141634 Malicious code in development-solis-cross-env-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dcccf011de4fd5407fba424c68a7b956c9e40e3be6c84753b18110b9fc5f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141542 Malicious code in deneb-europa-halley-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de3316b78b1b3497cd85456c92a3f1faa8d33e4f1db4ae920316ec0965c5dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144115 Malicious code in karma-phenomic-standard-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e33101a4daa0982432ad2fd50dddbb6bf3d524f23b9ef2235151a69c67e0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140414 Malicious code in carina-mdx-xerxes-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd044204a95843e7083af4777aecd655a9d9ac6d2120c78c235ae0164b0c172c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148141 Malicious code in spectron-webdriver-start-docusaurus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1aa662d0754a1dc188e33dcb602068d7a09025bfb691ea96cfc640e576690b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141651 Malicious code in dione-subscription-winston-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee660994a62fdbc5057c92951e6a2739b653f0b4ae38c2fef9fdced410d1b7b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141883 Malicious code in elara-mini-css-extract-plugin-lynx-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0366b7f17be78889c22880bd1190e5627d5bd6527dfbdc5052a910a723993563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143489 Malicious code in hyperion-morgan-start-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8a1f833731723eab33bb2157f6dd3737d4498b61a94a6d4279c80dd713bf0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139734 Malicious code in auth-yaml-slides-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d881b1b3d4ec241b1d53851ebff5ff1140a61b69a53a01c345a14b962fc49d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144767 Malicious code in mdx-loglevel-meissa-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909e4c33893b2a01e7ce57de10e579ce8302c27633a661dfbed926ef6435f9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149682 Malicious code in xenos-library-virgo-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403478779c33351d238232dcc3fdb2b77802c9afaa62025f5fd8fa6a8d1ae546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144359 Malicious code in levels-oberon-install-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98c11b8e2be55ebd3072519b7f90b1d535d45c258b4361e0edd5ca4394d288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141125 Malicious code in cors-ganymede-typeorm-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64aedef6ebfc41d40cb33e4a35f8db70ca590c8af93ee332b2eb454941e6fb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145118 Malicious code in module-terser-rimraf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d5e223b4b4c03261bfd63d53ff1a3b4ca1f1283ff4b81775390e14a9925f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146843 Malicious code in pulsar-repository-uglify-js-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad346edfd4edd2e29551090c05102d6a12d79b3fab9648346b880d2e34714ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141208 Malicious code in cosmos-jsonp-sequelize-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00a5abfabe04224fb65871927d49042ca24e04932ace2d1531b09a6386ee04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148524 Malicious code in terser-jsonp-version-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963e0198be8f4f3709c563091335404fb9386697b48f792e40d1e4ab20e22401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...