MAL-2025-147634 Malicious code in sagitta-zephyr-prettier-stylelint-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e0bc5f74d9334238f6e4593bc4bbeae0f83fc66d8a18c2709882e19e7a5326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139521 Malicious code in apollo-nightwatch-iota-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e337b3a1b57878bbc71d811c9092058ec1eeab9deff318459ddf6abb92cef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148660 Malicious code in thuban-parcel-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a2162f7ddcda39a5718acfc616b26db22ce8a0e0da7efc71531e95185cefd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148206 Malicious code in spinner-playwright-geckodriver-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca3609f32708b02f5163fb276f5c7fda98c95d96783b4fc183c215da71bb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148639 Malicious code in thuban-acamar-geckodriver-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2efe942c0be1e5d266bb42a397eec4438ab5d17f13940591bdfcc69cc152a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143128 Malicious code in halley-alphard-process-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70fd87a0b41ed17c1e8aeab77b69a49d174d403a417552c2b91afa0568e48d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142379 Malicious code in express-ini-soap-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49eae2ca0c7684bc542e8a3126f14f9e1a4ab907103a7c6013ca9cd73841ec41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148591 Malicious code in testcafe-css-loader-uglify-js-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b040a662f7e8b05e1b6d1cf3784fc142e5ab38537763c5ba7fe1b304a1f7eaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139728 Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141630 Malicious code in development-rimraf-celeste-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ad97a47b8597cd4be29bbd8d61383aacc621bfd566c5b2f523e669648942c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142920 Malicious code in gemini-wolf-subscription-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac34b37db8f5230563ed1d7c9aca5ba4992c6274148ebc27c70174dcc389fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145646 Malicious code in norma-json-stop-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5335b220c0ab2dbd39420712adb24b8f7f7628f720e7a229cf118d8b3f3a3493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142890 Malicious code in geckodriver-xerxes-capella-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8243976b2a0fa8bec3fb00bd12d4ac5e6c780a4786f554e126b8c60c391f23f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143593 Malicious code in ini-meissa-taurus-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde40f8918eb9e87872b046a3cae472845027cd5b7dc2fae91854b0725c92ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148242 Malicious code in sqlite-transform-jest-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4edbfb4264847c384da631ea6bc0589e5e25634a72695e65abc456edddc215b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141205 Malicious code in cosmos-cypress-registry-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184be61838d74995e813d28e8d20ce09f8082497818008ecacd08fd16637920b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143613 Malicious code in init-antares-deneb-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf06fd9688c77aeaeb15ff5608ce4a1fee14ee26aa826fd990a8f62ba09ced6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140348 Malicious code in callisto-quasar-dependencies-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604d3dacddd158e06c565b4ee035b92a9de3a096a10283e17147509ac98b4380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-cypress-pyxis-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf134834ab703042e9e90d1e29e10fcfb977b6d1e8c9f5a57c151be712a71fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-eslint-config-gemini-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcc24c27025a5441e1c4b98214d4687b5681a0e5e0ffa0d6616f4868e1f2e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...