MAL-2025-141078 Malicious code in convict-loopback-ganymede-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104427287b6201291737d63904d566b88badc27604dc3788a575b97b3de23343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146994 Malicious code in quito-hermes-mysql-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e284c810e73524768e435e0193cce5ab7bd48efdced7dbdbdae1e11f48cca83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146038 Malicious code in pegasus-iota-config-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7ee901b19693d954ff98d4cca16f606bc47bb75e7ed26766e07d75e3a35761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148447 Malicious code in tailwindcss-miranda-aquarius-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b2f9ddd15df74589ecc838ba8b684999addf1ad6470c0b239cb7e34e2ffbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149150 Malicious code in virgo-blitz-dagda-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ceb461493519fd852399f556b21d8c0ec514f74c1d9cfd064ccc69febfe0faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148745 Malicious code in tool-nightmare-geckodriver-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9973ab631522b2696dda34c1e449efbcb9782facea5ef651159b5320ca7ea22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149600 Malicious code in xanadu-loopback-enif-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b262f3dda7c4c884473fc437198ad7e57eb99f347ca9809993ad238590768e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139312 Malicious code in algol-upgrade-ini-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac480b2708c408bd3e270ab7728873ee2cac76bfff620699b9d1e38965fe6cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144600 Malicious code in lynx-superagent-neptune-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f96e51531e573a2c554dc865f68992d1f2b7b5668f83722fbb84f0dace0aca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148230 Malicious code in sqlite-jabbah-cross-env-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d06c65dd6879c5a5f056def2f439bf2bbf1c84c6df10a32dbdfebb777c6615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142671 Malicious code in foundation-sagitta-meissa-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cca1b2ab5bd53cc85c6357354786a95521da387fc53eebf4744c794b0ae539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145210 Malicious code in mui-rate-limiter-xanadu-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a4757b886e26c5c19e77e3c4467c3c02fd3966f22b96f7e278c0a362500ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143257 Malicious code in helmet-nashira-carina-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3942757ca6d78d183bd70caaf20bd6ccf9cac9ee730bda9da89573f57e331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144249 Malicious code in lacerta-optimize-css-assets-webpack-plugin-unuk-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c13c9ad8a827a0a466f60482bd8a6551b5d9521b8c924baa9dca6a48e9363c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140771 Malicious code in chromedriver-fornax-stop-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be70b7b1e7d4b70f16763b44d920025a6e3d26eae494c87e150d068726f876af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148417 Malicious code in sync-centauri-impulse-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714eea88b1ac1b803edabb28accb30f2b86addb9885d388aa105fd12c99bf508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148255 Malicious code in standard-karma-markdownlint-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9695934231691f2b33a0f68d4712427a228a65acf1aba1be1eeccbe15c670048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146368 Malicious code in polaris-slides-javascript-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea543f41810be6c3ce630f5af28173f14cbe4d825d2570aa9820d13bb7b1da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144617 Malicious code in lyra-unuk-rocket-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4295093b68906c766ccc987733aa97fdd69c60c503b7a32a52f6623c22ddb722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144022 Malicious code in juno-comet-meissa-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902446a464f790e026bbe1b3e2bc37490b51139fcc3970a97b23c430af7f9968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...