MAL-2025-147329 Malicious code in resolvers-karma-leda-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a7885561d4f9a15a76c0b8ccaa063112fd94b8899f912d7ab979e1f0bc78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147830 Malicious code in semantic-release-janus-pyxis-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf33b730729d4528a24e14f6d29c597a201ef03745edf8da5cc10dc413c4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-cordelia-private-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabfd11c59e2f3ae98ce11ae4f0b511e6e6e016987d8dd0740070fc439c04b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-chalk-neptune-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f350c32b8471bb603135076ced6a8677a3340a0c907da9258101c78a84e7569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-foundation-antares-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a67ec3a64d3a7650a12669ab6c5ae42927f3b82e08b118029fad105f67d844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143465 Malicious code in hyperion-auth-concurrently-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179c736d71883c669246ba5f27f7dbe695f4468b7bb6a97a7b35364a8a01c626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146980 Malicious code in query-tethys-venus-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec02aa4fb1d790afcdec3b12689719ff1d3ab28e2385cfd180f8af9977608cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144002 Malicious code in jsonp-nightmare-leda-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fbe40f02d657a7917d90b09bc7249a176e5ee2697ec8b356d4d57be89d66fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145691 Malicious code in npm-standard-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e41ca778897239c3e5cf27fd5df06531d908fac9d45d23d17e3169fcf0ca97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141739 Malicious code in dotenv-parse-variables-yonder-flare-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49784ee3d9dd79f226089b8f80f8a69cdef17610770db6905ee6f5d95977d16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146226 Malicious code in pino-mongodb-query-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60978187df58a76af8bf3bb453febdb1c26f374f6ca92ace9aab9eefbde3b201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149453 Malicious code in wezen-duplex-cypress-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60ddf1c40b01d135569731cc3be7be938f6a22260de0d1f1e0cf256d2be7c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142226 Malicious code in eslint-plugin-capella-pm2-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f01fce2cf112eff94e9c822221bd02535c7d92588588f9e2104cbbc4eae4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149769 Malicious code in yakutsk-got-antares-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce06be0821d032561661c0c9238657114ecb684b348a6e7cd326f717af19730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142367 Malicious code in express-auth-registry-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec068853f97580dd89c495e698ab8c8a2106c601302c5315c4b5fd9a753ce00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-miranda-fetch-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147340 Malicious code in rest-arcturus-io-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d0b8686eed7092e318656016dd7a3307ce443b16ea6fab1ef179d685a0e7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144661 Malicious code in magellan-sass-loader-hermes-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ff68d2dd7d1053bfa0409aff19e8eb4c277ed562bd9d6407f30d9ed4757ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148881 Malicious code in uglify-js-restart-delphinus-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba0449c1680c050d72fdaf4e88e5538f499c761c28dea380cbf83fdd0af6d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141000 Malicious code in concurrently-algol-express-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a0058178b59b515a67b56d6ac529d010098fd03ede8aab04ae2f929cedc8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...