MAL-2025-145116 Malicious code in module-slidev-webdriver-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd99e840b0e0e74e3caec7e7ebf1b86c170b0f4a4a307f300443e590e3d09b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147128 Malicious code in registry-fork-terser-webpack-plugin-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5f80d581068875ac320615ae15a242874ae033d46442d41454a22228f38a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148284 Malicious code in start-ursa-nodejs-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593bc23c8976e4718436bc2e85ed27103ac307c4bd87d7308b8a3d041620871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149111 Malicious code in venus-express-lynx-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8cf852ce1290b0d658feac972c9ad5e20e74bc2a89903c85978cb1c5797c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143144 Malicious code in halley-grunt-firebase-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149294 Malicious code in wasat-mdx-rate-limiter-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0f70be6c63321ba8f99aa21a4539ca8d3c3df796d1581f025866df7308c639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149534 Malicious code in winston-wasat-gacrux-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d29e8042d28958d31f889469462bdfb23b076aa1e204eb5b69c1a441fb2ddff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145939 Malicious code in package-lyra-postgres-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f43dc858b148e1ce57af54b03bdb8e6c2aee6a4a902f6c4b576d5a9e2d46e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144860 Malicious code in mensa-process-nightwatch-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1f0262ed9e2a8e84f68ed2b67789ba79c7a2c3aa63a82cbebcf527775b5a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143599 Malicious code in ini-pulsar-cross-env-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d11b83b7b486a7b785fa8426815688523e53e042c439819d5cd230612dd8d5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144039 Malicious code in juno-style-loader-sedna-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb1edc4673f0ed82d4bb87c438df25a1a79f430859c6849eac0dc14a34c4644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143089 Malicious code in grus-child-process-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b28413cef90aca4f8fabcb9fcb9cc4c3737e32a1247520c569f1d849bef559a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144007 Malicious code in jsonp-sagitta-proxima-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa753953218b29386b71fd301e0f77b7ee751f4c3fe229d8ada58d8b4905b054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145275 Malicious code in nashira-flare-rollup-plugin-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389955c74cc9198f061797975cca0e77d5d47037a30efead28653746348f6c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142403 Malicious code in farout-chromedriver-aurora-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b98547be9e19d5bc0cfb5d20c3f5dcd85c8c38d403eb7042af8d27946d36a4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148781 Malicious code in transport-commitlint-callback-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f807ba3959fb8ddea8aadf86e62f2917a3c17d64df2cc7a46f80fb9868c3d97c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142216 Malicious code in eslint-element-ui-buffer-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a508dc44f6b649dc11aea2adfd3e0733d721a23e86034b25f378d3064b31a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145574 Malicious code in nodejs-proxima-link-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63188598f74497a2c47b3cde3e375a0268745c99100ec6cefb8ee6a96c36a71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146957 Malicious code in quasar-query-mongoose-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5788a81fa1f290385db35fb12fe9885e283c9069d337479ea30915f15012fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145190 Malicious code in morgan-vuepress-corvus-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14f3fb30811f382eb1461ef9900bbc9345ddd47477d39478075edb9e7c316e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...