MAL-2025-139966 Malicious code in betelgeuse-apex-async-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b03ca299b92c0eea799ba3395d5f76c7333de5e854b7bb98b943deab8be90e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145103 Malicious code in module-eslint-plugin-cypress-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f039693e2b904889cb2dc213071e4df6db8ee5cb545b43a2e412144c961727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139227 Malicious code in aether-cache-telesto-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148120 Malicious code in spectron-nextjs-element-ui-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0061303e422dc557f76edb02ddf4add87660df7d1e7b5c1ba2c1410f24e5d69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149218 Malicious code in vuetify-polaris-jovian-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c833e9ad5840b2bbd0c8b479e1f64df65a6d93f501cfe07138ccf463d05acb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148787 Malicious code in transport-dynamo-hyperion-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e02a9b6950f1c0062ca81f751201a1d3e82b793e604f56bfe93c574fe06b780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139468 Malicious code in antd-solis-rehype-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6c2e86ed9bc0b6fa4dd7b9bbd2972e683c9e48b1caddf8cf4c85d9304f02d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-fusion-mongodb-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c18743cfd4ff6c9eedea2a8176bfbb837d77317f5737a3996133ffe258edf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139442 Malicious code in antares-supervisor-kinetic-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec376c7374c21bc6c2e7e7526708b9be627909142b8b6f8a4880b647e44265df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145528 Malicious code in node-sass-bellatrix-commitizen-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8300cf67a6d08ef996a5dd67ad197d2f9e90d878f87659c59f6da61608c421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-semantic-ui-cypress-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece749ed6b3a6383fd5539ce53e0778c8e77de27ff7db6abaf98171a96c22cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-request-antares-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5735598cc672f8656c24783449a33a750bb3c27163408675778eaa624319e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-triton-nestjs-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c8644c3ec5a03892a2fa146bf25282784c5cb965e6b3500b50123c638fb0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144856 Malicious code in mensa-janus-chalk-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943844c3f87ebb8c7913e7fba2bb786c42c182a5f1af9bb44ff16674630571df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148911 Malicious code in ultra-terser-capella-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1313e3e3f93703b6b22a59de9916d11ccb6378d4b340b02f531a428f1b8515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149866 Malicious code in zenobia-elara-mongoose-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf9d9dcf9b5e3cebfd06d89909cf7e106312c8c69aff35e4e6bb17f77897675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143914 Malicious code in jekyll-selenium-prettier-plugin-markdown-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b026af46ec86f7d28b42b47be89d21c6c70732acb979773420fbb4796ad3a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149616 Malicious code in xanadu-yildun-kinetic-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0053ae5234c7099173b332a72ca32f5e69106ab132774df30e9cff0b9e09fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140140 Malicious code in browserify-readable-mysql-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdc48c23beb6dca987010f9cde20f17059008b360afeca9729396198f89faa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-ophiuchus-webdriver-mocha-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc99ba026da8566d257a516cae1495a6154a7a20dbfb8f5dcb605c6e138958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...