MAL-2025-145463 Malicious code in nightwatch-deimos-leda-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8475c1c266d0e690c2f9296e115ccc4b101bfc71735de6f158cc7dc1336c634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145518 Malicious code in node-config-sadr-node-sass-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a9531f78b9c6d8ced2fbe159fa6b011866cef7d09a1509b8ae0f2ffbf42f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-html-webpack-plugin-nodemon-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175791e0a2ba963a3bf01b4cedcf4e14f64712bb8230142a684a456e4a8b944d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-apollo-procyon-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d68775694f1a02f061a9166189e1da1036c33dc0f57dd3bad87a9118563e46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-comet-prompts-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504ff9d0a1876739fc8a79596b830b0a92c29b4ac7fa97d300fa5358b1419756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144002 Malicious code in jsonp-nightmare-leda-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fbe40f02d657a7917d90b09bc7249a176e5ee2697ec8b356d4d57be89d66fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141000 Malicious code in concurrently-algol-express-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a0058178b59b515a67b56d6ac529d010098fd03ede8aab04ae2f929cedc8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142367 Malicious code in express-auth-registry-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec068853f97580dd89c495e698ab8c8a2106c601302c5315c4b5fd9a753ce00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148881 Malicious code in uglify-js-restart-delphinus-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba0449c1680c050d72fdaf4e88e5538f499c761c28dea380cbf83fdd0af6d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140776 Malicious code in chromedriver-jekyll-typeorm-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1c0cb1dbb82edbc1fe147d6a005c0a89fe28d1455f9c3b8588be5233ff4110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147057 Malicious code in react-bootstrap-enceladus-oauth-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975364cd584979fb854f2c748200a3cfe076aa7bb4f0fa02f2739d144b73a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141520 Malicious code in delphinus-jovian-proxima-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20db91cb07ec445e3bfe9cbf459d7d84def7257f90e35fe90660aa5e805ae350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140674 Malicious code in changelog-markdown-pdf-rocket-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3727a07d660807935d10820e328470b6bebdbec4098c36a571a58b6eb4fded92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143297 Malicious code in hermes-acamar-pino-pretty-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f910abe8927390314d9dd02154054f3ca7651d75fe2efdae6636290baecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145170 Malicious code in morgan-browserify-install-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0347568bd4177056426b3477b7d55efb1804f72f2a55caddd63efe23dead5104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149769 Malicious code in yakutsk-got-antares-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce06be0821d032561661c0c9238657114ecb684b348a6e7cd326f717af19730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148133 Malicious code in spectron-webdriver-init-wasat-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8431aae3cf4bfc929aa82d1fa1c88264a12e7a751e455259a574cc0e9a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145691 Malicious code in npm-standard-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e41ca778897239c3e5cf27fd5df06531d908fac9d45d23d17e3169fcf0ca97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146991 Malicious code in quito-eris-markdown-pdf-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8ea8733b69b5c135fbafdbc9376fa64fe9edce2f35fed5ddc73567efb19685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...