MAL-2025-140996 Malicious code in commitlint-webdriver-mocha-titan-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb9f36e47eee948dd38ebe0cf6ae2a2da5e5920cf63ac7a40deb44853bfc698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143716 Malicious code in iota-configstore-sirius-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89652821e865f568b1d8439feedbf080785e427885c6c6dd0d0cf76b0115d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142147 Malicious code in eridanus-install-supervisor-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1376bd5cb9c0baf92baabed9c0684dc0c88040e298eda6fe848c4b721834c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146324 Malicious code in polaris-aurora-mensa-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314a9b30e500b1aa27850cd7078ace3a9ca58b62ef8ef1925f4b3e585475f6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143465 Malicious code in hyperion-auth-concurrently-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179c736d71883c669246ba5f27f7dbe695f4468b7bb6a97a7b35364a8a01c626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141520 Malicious code in delphinus-jovian-proxima-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20db91cb07ec445e3bfe9cbf459d7d84def7257f90e35fe90660aa5e805ae350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149074 Malicious code in ursa-schema-norma-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed297aea32ffff06bd657cb24540c11c48fdda93ec9e7a04d4f503346065c10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141566 Malicious code in dependencies-envconfig-bootes-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c603800bbff9b6886548978ff6df941a13ca7f23109be574c0f203af1e116c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146863 Malicious code in puppeteer-repository-pino-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdee3ffee1d89db096308708e2d9aa183d3687f0848cdd526e9576ca308d27ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147427 Malicious code in reveal-md-yildun-auth0-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c68fcbf2185e5309c5a9155f27935e9e2c4ed747ea9ecf3bdb711d8364e0e1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140278 Malicious code in cache-ophiuchus-node-config-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b0d81771865bb974c560ebcce579067abe56418b4aab7d7db4414d5caf5ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139234 Malicious code in aether-mysql-eslint-config-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e723bdfeb0ecf0f7b823a7630a67f5018f37e2669440510b547ed98b4e60b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141000 Malicious code in concurrently-algol-express-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a0058178b59b515a67b56d6ac529d010098fd03ede8aab04ae2f929cedc8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141357 Malicious code in csv-schema-alphard-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a9b936ae6b74c7d7229c33b08bcb2aa9deea6014c2edfef4494e291ec250af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147319 Malicious code in resolvers-celeste-antd-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e4cef15b804d34241feea86545e5b71b9cb1ccf014f30da9512e79a4b156da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-node-sass-neptune-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e81b18803284efbb1d7493c9733c7ea8fb01527a0f6beca5143224cb3996ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-enceladus-playwright-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e588972d11e7d8059b4eebdb64157f16aa516a734c8c719a0f4ce586331e6ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-sqlite-phoebe-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68930a3bb62183db59be60a97ce209a4b1f7ec8908589e1ca718a0080708f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-proxima-capella-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c4e4e6eafea389b8886de6367219c50aafba5925e89c98723c039c522076e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-weywot-xenon-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9067243135c3a1d2c24a2e061e3cf70ce446a10f71d45011eea83ff5d197ffb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...