MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148271 Malicious code in start-husky-nightwatch-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20316704e355b8f90ebd7ca6957fb6a2bac05276f95761d8281561f3a11757a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142288 Malicious code in europa-protractor-readable-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa112931e43f24bbfdf4a2b84e975c5dc4fb7573e88503849b1ec74e6da0a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148316 Malicious code in stream-galaxy-loopback-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d45ae83d454c1dad43cba0a2f8238b07627a3bf01f9330bd8c4367fc4f2241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139817 Malicious code in await-yildun-canopus-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b3f8d183c6a4f0b316edb71ecd07c53680a4f679faaaae50a2e104ed9b1332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143271 Malicious code in hercules-bellatrix-electron-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bac72ecf776c1adf3747f46d0a9eec68e308972908ccd0b243c50ae647139a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147687 Malicious code in schema-andromeda-typeorm-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab4edc4143c75bde6ff4bb54d9f1c6a52b663c4e007b06ceeeaeaf6278de9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144596 Malicious code in lynx-node-sass-hermes-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b4cb8743405da734d4d184d2310cc39dc588330460456eb82aad066ff03c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144732 Malicious code in markdownlint-zephyr-perseus-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2635991b7d8ec4de019d0f6887e3fe94ceae95748053607f691bf9178543ef21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140887 Malicious code in comet-procyon-terser-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b417566f91d2d0997761d52bf5ca6f8226272728c5e87f708ed8025832c4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-csrf-solis-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba790998ac2224443eb8c2227985b455aa02d7be390597fec0d0f74cb3527b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-cors-development-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7999612f13891a2510fe201d484969ecbc9ccff788672c6d65017371c48a27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-cypress-dagda-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9480eb72fd64424dc78d7a68c04b3407ef3bb591d0550aee3bb1b56a326f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-pino-pretty-parcel-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf34adf731cd0173b3fc913fcac4763e84f4cc5b9fdc9f8f64557546928e3e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-wasat-optimize-css-assets-webpack-plugin-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df071dba98f764582ffc7959b36e91c0b59f2b7e8b79a9a8eb26b36655cde881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-markdown-hapi-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4e9bc0187b1ff61b66ba57ddd7a30ce8d3ad9e0fee1b75f97b22b698a286c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-phoenix-bellatrix-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce266d563d5b2b900c4c7cb63fe1324d5f2f43ff6fca843bfff590fc2a4e0423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-thuban-child-process-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69434b1c25dc4427b5759fbfb809886fd0b6b03c34ae3d2899345893727ae36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-gulp-lynx-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddfd9b7191654eb3387ba8d4a8c42bc2d8f476f01b89d97689ab344c8dc826f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-xo-writable-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a988f0de965c3f72dc8524142cd72070b2d172dec3c81c688da6051723cacfe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...