MAL-2025-145542 Malicious code in node-sass-google-node-sass-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916a91c4d8ed0d001a8049bf53130bc5cee5f30c571b7bbcebcb9ee50036dabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140894 Malicious code in comet-vulcan-mdx-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f65149a14d2b9622e50849679ec66950763e1cd38846e1c80e2e13fae21197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141568 Malicious code in dependencies-fusion-prettier-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b282945432c3d34eb90c67d81f9fdba5527b68fe207aa9b76015411e02c7438b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149172 Malicious code in virgo-toml-passport-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584f8b619a6b42d51e3495d518d1c3de32ee362ccd4c539987a484b1f3711094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140762 Malicious code in chromedriver-await-enceladus-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b544cd03ff385e714b7cd27f9fc9b522f3926092527344be2f153f530040db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146230 Malicious code in pino-pretty-bunyan-aquarius-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3be5ea47811d0b857872514e29ac72bed37f671a39bd04d05eeaf989ba52be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141676 Malicious code in docusaurus-rigel-child-process-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19ad6fbdcb00165d7f66f057681a85b17f94200086933314c24754656ab7969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146731 Malicious code in proxima-protractor-mira-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05006d9d7135e2d50bc05fbcb93a478556d9f31bc654760d8bbe915920ba941f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146944 Malicious code in quasar-cosmiconfig-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76bb28548534fc01c9b0261f4267dbbec430eb9d246820b1104a172a156064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144127 Malicious code in kastra-pino-equinox-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda6bdcbe3cbb6ef8ab1bfa09ae585d6cc0e53b722c68e483091d717214b52b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140278 Malicious code in cache-ophiuchus-node-config-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b0d81771865bb974c560ebcce579067abe56418b4aab7d7db4414d5caf5ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144609 Malicious code in lyra-hapi-airbnb-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65055bd97dcce6cc8bccd65bf096b6499772061ed4af24b831f79df372a16f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143278 Malicious code in hercules-convict-indus-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7242dca6f6b47df2e61e95dbc7b3ae53b2eb59021756a5a4ff56352a8137a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-pipe-puppeteer-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1520db9615b2fc63260e5f7cfb5985768b9d26e4cfd00e1879c4fa2ce22d6bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-atlas-event-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d0b59465aeb110ed77aa5dc35e61cee72f2d0b21f1d84fadeab03f8f243a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-child-process-lint-staged-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d03a106828f6507da5ded4d486c87ee74293ac205b21b7d112739c94a367fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-impulse-geckodriver-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0618ce967e87623c467784db730cc31e57def2ab1ce14eacec960f92e0a40d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-yonder-umbra-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c027042fd92c3a30c321fafd4afb495182a3bf29c1f24514ba2afb57de9e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-thuban-scripts-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef458e303d7a75de0988234b7597f060256d5a409b9cfb707a4041c94d8a5f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-semantic-ui-corvus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b8da9f5521fb24d5e53f53645f4fb810e158f42eab400a7d5badcd6f44895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...