MAL-2025-144118 Malicious code in karma-quasar-io-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fba8e53336890c2a909220698dc02d13850830f1b1fd4621a31308f933e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146480 Malicious code in prettier-plugin-markdown-eris-bellatrix-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3139efe2b8fe49fc17c17202dd196338965628ff711b11f0d0b1c4e1727266a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142401 Malicious code in farout-changelog-apollo-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c724dbf3bc227757e4c0bf560f5f7313bab426730af0b9d0c024502630d4c8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145795 Malicious code in odin-hercules-enceladus-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57d036179b1f1465f13df5e058289fac3398ff3f11cd472e0c1199d10056a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146170 Malicious code in phoebe-pipe-repository-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e5e991ebc3e6935e559da0f12e7cd8d6efbb7868d545cd595a7f3e7aee0ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146331 Malicious code in polaris-cordelia-jekyll-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92770264ec80fb27b4cd47c4c41cf2cc5b9617c694833736cf037433d29e2078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-dotenv-safe-wasat-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf289cbd205a33d2d44a901a7c9891a58d1e2ea2e6bcbdfbbeecc2e82fd0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148300 Malicious code in stop-package-phenomic-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc099d38b27f19ea7c371913a1c7be9ca31b14fcc5d5c992ed20417fdc8eea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148385 Malicious code in superagent-nightwatch-got-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e9aec448506ac282ea13c172e7921e650b5cd3001c93cb67df38d502291a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142861 Malicious code in geckodriver-chromedriver-gridsome-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8871ef4db86c7b2c8ce589d292485e4ca71ce731a3e3f9928d59a1985727379d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149644 Malicious code in xenon-fork-levels-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89814b0b9aaa2fe6cd27e600a8b89c88ca97ce6c6130c4af46a9e19ebcde5ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140067 Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149743 Malicious code in xo-async-less-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd699bec9ea713703814b65c3d925c90e38c7b5078f81289df60659781069fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142728 Malicious code in fusion-cygnus-scripts-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da0f3ed82a6802e1032006ffa7496f3444868266e937a6df6c74d62d391362d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148589 Malicious code in testcafe-centaurus-europa-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63cba83b8eaa4158a54bf908f388a4b53f35a21124e1a87f75a2f4834c212ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143495 Malicious code in hyperion-release-it-halley-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6398d96b583df5659abde30c24efdd2a4079e89db4c12b764d5adab1d17b39ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149357 Malicious code in webdriver-mocha-miranda-virgo-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8823687b1a4ad4db6d07e11c07334da46f31bbe82d7d061ccf946caafb16fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140143 Malicious code in browserify-stop-sagitta-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb65db83237cfff58b0e4af1e88a81f87370bff46c3902bb7ae2cd9deb6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145477 Malicious code in nightwatch-parcel-cypress-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4543b97d0328d50b59b438e8deb148f568db56de4b1fb5dedb47f443bf2033a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143015 Malicious code in graphql-webdriverio-neptune-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da258c0f433f7708e70b770c2146a517b148c8db5ab654f3af6f60396a900dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...