MAL-2025-139213 Malicious code in adonis-leda-lynx-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43a62067cc2fa7f0422966b16a4e7a7bcff6ae40aa16597241ef8c0ac9db526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144396 Malicious code in link-algol-nuxtjs-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b859eb9933bb6f0230d1839ca2c981f687fb0cf285bef87f4eca1f31d5883ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139976 Malicious code in betelgeuse-enceladus-comet-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a864a3071455032bdb36223a7ab762490b721fd9357cd81fd5c6132fffefe436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141459 Malicious code in dagda-algol-cli-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ba74dd1ed1fa86b1e45b96f7225f5be8ef4b2a24606e0c856dada5cd3926b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143797 Malicious code in janus-apex-writable-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfdc92c35108b7bac99e9f035fd519cc20125241b0a253c8541000e44936d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-colors-helmet-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03788d4a6215ff1f912ae8e05fe270c7fdc95fec963cfe2a986dd145ebc8908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-schema-carina-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40013831782978aca7fbd4702500904424446812b22f6f8ecebe2c19bf08dbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-forever-prompts-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2034ba99b3fac3845b32a389d7bd18a7f63cdd0abbde72b03416fab0083e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147090 Malicious code in readable-pulsar-umbra-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a37db6acf1eeb86d61cb6ee3336ecdd064509d9376e2b98857ad59d03c55d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143851 Malicious code in jasmine-fetch-standard-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c5b2a64e133eb436cf9d493d5f98ad2e3d60e9c56f7f4bbe9dd7a9bedb5315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148163 Malicious code in spica-json-umbra-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26370197219e71a02c3263fecd9518f07a236ae4b30c53a4642cb3efe432a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142860 Malicious code in geckodriver-chai-hyperion-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79d495abb6c1e5b082bab2c49a939c1066d9169d018a55eca80c287333b651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141632 Malicious code in development-server-electron-builder-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5665caf467f0f567035e4af0bc17752525fe75d750c4233aaaadc7d9522ecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147804 Malicious code in selenium-hercules-chakra-ui-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc938ef30744453595cc43f857769b3c672e59f89307afd341e5f45796c71534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145691 Malicious code in npm-standard-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e41ca778897239c3e5cf27fd5df06531d908fac9d45d23d17e3169fcf0ca97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147545 Malicious code in run-script-gulp-hydra-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e525661601cb3fc186374bdbca0cc950bce19bad437d85caab9ae1e341396a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149304 Malicious code in wasat-vuepress-quantum-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54baa5ade6015fb6c9054123ae3a3e98a0e3155acfa1feb4ea656bd3a588600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139748 Malicious code in auth0-gacrux-gatsby-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf6f8d747897cf96e7085bd279d14256a71b19de5530cb312399c232e7e9495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140515 Malicious code in celeste-nebula-less-loader-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75d25e2d2359775fb7bfbd299dd722f19cdbb3c9ce481190d76ac8e4bc43d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146863 Malicious code in puppeteer-repository-pino-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdee3ffee1d89db096308708e2d9aa183d3687f0848cdd526e9576ca308d27ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...