MAL-2025-147566 Malicious code in sadr-loglevel-bootstrap-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6389511cc6288738f716df02c33481d1278cbd9fcb41a5db671475496f03c9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146567 Malicious code in process-sagitta-public-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9486da0eab8d7a0b1571a979e39d9cc7458f2cbae2f6fc67958c37e403b7af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142734 Malicious code in fusion-geckodriver-server-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958176f41f08e2a4e088ec62423745c59475d2e9e76c5efe48941dde7761aa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143257 Malicious code in helmet-nashira-carina-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3942757ca6d78d183bd70caaf20bd6ccf9cac9ee730bda9da89573f57e331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147732 Malicious code in scripts-foundation-resolvers-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9bbce27bec68a8aea224727202223aabb0cbbb29433c1d00dc58f3a48262bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148626 Malicious code in tethys-nova-changelog-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91cd76444f1127ad2a02cdb347e60a363ca07cf1a9ab39ddef4716deb7014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147118 Malicious code in redis-webdriverio-radiant-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897a7e6b0d29673d0a35368dd757e92f753b005c3adffa0fa191ef74cbe7ff03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141954 Malicious code in elektra-toml-chalk-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66426a9b987a26db0a85bfe40dbc680fbd76e9a476684312d2f5f4d1ea4da689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142455 Malicious code in fetch-pyxis-inquirer-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22460db8edd1c2b50d5e673d6618b9ce1467318283c7d01eff42c298a3541333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146772 Malicious code in publish-achernar-rollup-plugin-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f907ad22b995a89067b2fbf245e4ae84280f4e6ead516ca728f2317db3b178d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146429 Malicious code in postgres-canopus-supervisor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0ae963def08804b0e22002cdc6ddc6c066f05c1c505b3acf66c67b8716c8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148293 Malicious code in stop-duplex-cz-conventional-changelog-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af76b88fa4aaf437c60788818714e6b32283015c465970d6620af77d5b1f084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147029 Malicious code in rate-limiter-ariel-slides-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ebce7dd4a32781d94b11798bea39890801057ff66aa44dfcd434474655649d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144760 Malicious code in mdx-chai-indus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7078962811ac003829123acb73f64404da664a345beaa595a158d60b963e27da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147309 Malicious code in request-repository-meissa-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebdae1a304ea837869b374cdf49ce53b0222699e2e9a16802224a64ee89f49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148803 Malicious code in transport-stream-nebula-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38e7a1ab56efe7764e9f41c224575c50e02d176028d4cdc32466f22022aae16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141606 Malicious code in despina-publish-dynamo-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2239021d8ba3e0fd35cef18f03eb658475db7e972d2afced467e377c9c17d430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143507 Malicious code in ignite-callback-node-config-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8894545ee7492ce0676852567fe5d3d6b2139f08799c38602766a6a8f7f91fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139264 Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146103 Malicious code in perseus-playwright-ini-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed04bcab08314eefd54ec25d25b978908a323fd77c17eb836416092414d907fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...