MAL-2025-141776 Malicious code in dotenv-safe-sedna-electron-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ecaf5de0c6c8b5376683c79a129b95173d9711af0e4f48bdfd6b08b6ec3c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149448 Malicious code in weywot-warp-carpo-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef0aa9f96763aefd511c2e6daea8c00dbcc1312a8985e4638d5c11873a0dee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142104 Malicious code in epimetheus-public-version-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc3b96a48c694acf88349bc3335188f0008975d6ce32521775b2876d3896a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143282 Malicious code in hercules-fomalhaut-chai-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f39492099e5c35700f3b300efb4232b727c56c7bf176574b232c0f5d7d127f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142906 Malicious code in gemini-mongoose-mini-css-extract-plugin-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ff2d997a3921a2cfcfc49b398c173f42620dd3ec2c30e47b5b83e91b550b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146567 Malicious code in process-sagitta-public-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9486da0eab8d7a0b1571a979e39d9cc7458f2cbae2f6fc67958c37e403b7af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143252 Malicious code in helmet-enif-gridsome-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb39d8e6ecbba968ccf3078cdaee4dc1337a58a7ffa64e62d214da2649c403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146779 Malicious code in publish-child-process-halley-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372d84cda77d894b3852a08cb80f633fcea5878af8dcb2e77b36f8b26f4e35e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145350 Malicious code in neptune-algol-carpo-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa51c8554a0bbaf6391715e061be40893cdfa1063c0ccaba1c1b12720935395b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142813 Malicious code in ganymede-nebula-playwright-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1f1c5a4a1c55419ec29857d1e30fa3543b82900639e451034c7637c80e6af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148188 Malicious code in spinner-commitlint-wezen-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7248b099b94049bc225949d94b135a1b4daaf5102e8fb556c93c3a3b747c13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145998 Malicious code in pavo-graphql-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143945 Malicious code in jovian-deneb-global-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc45d25dff6428f6f80adce429bef51b48997924c82d3651d87cfbcf804143a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149039 Malicious code in ursa-andromeda-avior-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92b9cdb554417f4a121dc2e38d5188925f4ffd5d976110e975aac9951bb27b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147918 Malicious code in shelljs-library-development-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3656af8447eaf132ade4da48311dede7839d72f50c653ff9c19ceff030aff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139639 Malicious code in async-yonder-node-sass-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b951433d2aa9d6be0e893074510f1cdfccaeea107a57ae55eae5f9fb22f25b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145735 Malicious code in oauth-jsonp-figures-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a6fc5daa675afd58f702aaa8ddb9c7219d1acfc6d3c64845b81303a29c9247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146601 Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27adb475c01b655934995cdcafe5af454454fbd4beeed4ca694c1c812cbac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141342 Malicious code in csv-changelog-dagda-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc290c2c78dcba5a346d338e0129ef0840d8e48f706f0fa46d08a8abd15054c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140714 Malicious code in chariklo-spectron-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d78c278ecff4ebaff38abca456c02346ef98a651fbad21ad8f688104cf4822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...