MAL-2025-144002 Malicious code in jsonp-nightmare-leda-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fbe40f02d657a7917d90b09bc7249a176e5ee2697ec8b356d4d57be89d66fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148133 Malicious code in spectron-webdriver-init-wasat-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8431aae3cf4bfc929aa82d1fa1c88264a12e7a751e455259a574cc0e9a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147545 Malicious code in run-script-gulp-hydra-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e525661601cb3fc186374bdbca0cc950bce19bad437d85caab9ae1e341396a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146991 Malicious code in quito-eris-markdown-pdf-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8ea8733b69b5c135fbafdbc9376fa64fe9edce2f35fed5ddc73567efb19685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147340 Malicious code in rest-arcturus-io-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d0b8686eed7092e318656016dd7a3307ce443b16ea6fab1ef179d685a0e7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141039 Malicious code in config-sails-repository-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef22d2e7c169092869951d0002a750ed5d23a4793af0396d7f0f5460b51b67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149453 Malicious code in wezen-duplex-cypress-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60ddf1c40b01d135569731cc3be7be938f6a22260de0d1f1e0cf256d2be7c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147797 Malicious code in sedna-typeorm-mutation-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61272cda7f06f3fccb46fd29779e95028acbc6fd37fc9c1f6a0c6a66b9f59e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139458 Malicious code in antd-izar-dorado-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0060bfab0cc5992ea1beb99b8b2dbc5251d85393d715a642e6c2e3eb188c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-mini-css-extract-plugin-mysql-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a86d37654c305f1ca7d6d2332f990117367cfff2ea43380f8079134bdd6b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-bootes-foundation-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53c7346225795dac3b7360459040503656b008241b0ce31c45b2c4c8d522653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e20a22a9c22769398e8739c99b3cb32ee807c0d7b81540638278571f89a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-redis-telesto-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace80ece3eb943681bffd65c77aca3fa03730f975eb6c4b2df89cf6ca178c3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-fornax-cache-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30451cfcb018e07948d2bb2cd56d9b18dbeb975f403070768ae3c9d68285cf6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-centauri-csrf-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10971ec1a6733e379704351180a293b3f5699ba9e8531303ce8229853c62bc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-europa-apollo-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12965135fe97f0da1766cf10100ab1dbc12895842d4ebf6a356314385cebe313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-sirius-reveal-md-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab775aa8e55d69538292e9062a9c626861ad9842d7b789d92e8e81b5db22a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-html-webpack-plugin-semantic-ui-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef6de5e15a7da6975fe2005dccd99ac7c3db5552e4b587476a8165581e05b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-concurrently-webdriver-mocha-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02af8e5f5322a6dd20faee018c741ee859aab71d39ab4c17c10a576073f4f1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-nodejs-gulp-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9ce85998f19be660fd01a665097cfc83355d9d6c8b14b3f39487793e5dfb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...