MAL-2025-142537 Malicious code in fomalhaut-chalk-hugo-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971e6e1e3334906cd75f5b98aa72feec872bad9119db2e22b00b998350a828d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146950 Malicious code in quasar-geckodriver-got-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f1df05da16c6960d3d2977c6fcabd9d256fd3297e8205bfca97b625c6a24f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142059 Malicious code in enif-quito-spectron-webdriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ab05c0abe59e44166b054374c43449336ba83fe938e39d8214b4c678b52ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139913 Malicious code in barnard-nebula-altair-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d371224236e78d1bf077551b6a3e5eada33e7a51cafbbfc732804d200f8d6f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148128 Malicious code in spectron-webdriver-chromedriver-sagitta-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06f2eec608e17c83e990fe681b4c5261e230d77ce9cac37d95422b793606bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142141 Malicious code in eridanus-atlas-jasmine-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc87488aa9c8d7ca58ed718addb38c591006dc1b7cbc23c931a5cde9d6d8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142132 Malicious code in equinox-restart-webdriverio-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c1899b400267388e1f79138f7b9c4756f3940d4bfbed6783ef7da2ee33251d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144910 Malicious code in meteor-foundation-callback-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158cc65ad87381b4a564c458d959004d7496c8d9fb16a7a1070b0685ea9fef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141510 Malicious code in delphinus-andromeda-jasmine-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ddb6526ddb58ea3ca57c2cc5afd76d135b8bc9b76babdfa5237dfd09ed5308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142560 Malicious code in forever-apollo-oauth-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90943887c088c5605934a7f3eb8800f69d5e476dce2f64c9ae90f658706a9516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149801 Malicious code in yaml-polaris-loop-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5dea1ed6a0ab78b929231fb50636b81477ff4ce75ea8c5dbba76e18abfc479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141043 Malicious code in config-wezen-nightmare-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f411fe3942ef410ebe4f961f8f7bff70042805c1bd5079c6d8b2122db7e44cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148377 Malicious code in superagent-cors-vuetify-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489811e779c7cd64f6303eb95d751c360fc9c8e8cf5ae73a590f8d2d0cd773a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140202 Malicious code in bulma-antares-update-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da90409dae49766f73cccce1aa6e68c01b0cdeb89095c307fa9ed01a6e3d9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141876 Malicious code in elara-google-auth0-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15389f5580c9c15a58a0408109441fdba6487427ec7c99e16aa04252529901d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149788 Malicious code in yaml-express-cors-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0e357b8c4c2783395d7b2c5be74a839f64a73b1c75175d298ebe42eccec5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149341 Malicious code in webdriver-mocha-avior-phoebe-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1cfeb8ea3ae34191cbf175bc8f201b2e1d384825e7b62013a4aac53caa67bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144996 Malicious code in mini-css-extract-plugin-socketio-bellatrix-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c680f11fdec440013da9ef0793ba800927779914a1bc83a8b7749613a0921c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146564 Malicious code in process-prettier-plugin-markdown-ganymede-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa72f918996786d3235c35e1d15645cdc1aba81c886ed26e2d88453654fca1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141328 Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e20a22a9c22769398e8739c99b3cb32ee807c0d7b81540638278571f89a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...