MAL-2025-147048 Malicious code in rate-limiter-soap-colors-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d26fcbb86fac321c2a89996c3d3a5ecbae4265c62ca42ef3fb425c829669460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140800 Malicious code in cli-gemini-kastra-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6605dccf94532fcc02386fca1e6f9054b5291a3e909cb1a0504204ee8be4880f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145068 Malicious code in mocha-ariel-wolf-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ccd0516e5a02ce30bc9aa691ace0de847ff78b26204bb4998a2be28a48119c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139647 Malicious code in atlas-karma-sync-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3aba52d0957eacf7f9cb58860dcaaebcd83e86487cc6f8cf730279da91a6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141379 Malicious code in cygnus-schema-pino-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dadfaf6400f24675483af5af45b3679d0f5854fdf0ffca88edf168e4aea9ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146165 Malicious code in phoebe-nightmare-npm-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774a47fdb518927067c69933219ba0bfd8dbf5fb177ea54f167901861846ee65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139563 Malicious code in arcturus-aquarius-corvus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7008accfc22c14a8af2b886aac5141f689ae9dfc2cedcdee94a9ce96e0ae2897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148256 Malicious code in standard-markdown-pdf-lyra-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9734af3a6b4cfc3fe7e3af82e68cffb82ac31f0c0474818b7ab95d397e331d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141511 Malicious code in delphinus-ariel-apex-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b947a9067e09e6ea0296b684556baf143d2ae93eb8a8041dc79efe79f7e54ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148617 Malicious code in tethys-enif-nconf-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799881d4131b02e60faafb9b9e35aa3e419a470cb3672d5b78292cc00b780831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148084 Malicious code in solis-repository-envconfig-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89bf2c00540661d925a3c568b3f07900ba1f4bbff48ba51c779203bc515bb5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143792 Malicious code in jabbah-spica-corvus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b77122a85467dcbf77034e0ca197862dd07c0ed4a66331a6fb2372a7250c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149058 Malicious code in ursa-iota-ini-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d84e7df4e12deb90e73422bbd310ea7db2e28cee2688e87284777d4daf57bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142995 Malicious code in graphql-apollo-europa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f721d637bdbdecde413ec4901bb6ebde3edb518397261179621a070d8e961bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144649 Malicious code in magellan-middleware-protractor-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bcf903d4874e22b6b79a00b1cc2c3a1fbb30b21d8d457777e38c1fb17f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148280 Malicious code in start-run-script-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe781b616783272336fc83c52ff140f961736366976234f8bf7a06d0ac590387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142063 Malicious code in enif-sequelize-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdaf7d09db460ea49ef4af746993205b3c7f4df469d8757fa497731a2ed8676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143036 Malicious code in gridsome-css-minimizer-webpack-plugin-graphql-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae26c88c181d9c55babee3d7420ebd9761f1cc23f179a381d9b81d8f747c8c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144622 Malicious code in magellan-astro-taurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf0ce6cfcc1944002839109c84e81c317bf8ee3ead756f370ece942286982dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142105 Malicious code in epimetheus-regulus-sass-loader-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ee18d4709d88ba8bd65ce29f6d0c2c42a6ec04ffd410f7c61eb189f5442f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...