MAL-2025-141632 Malicious code in development-server-electron-builder-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5665caf467f0f567035e4af0bc17752525fe75d750c4233aaaadc7d9522ecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142860 Malicious code in geckodriver-chai-hyperion-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79d495abb6c1e5b082bab2c49a939c1066d9169d018a55eca80c287333b651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141207 Malicious code in cosmos-helmet-grus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148575 Malicious code in test-mui-fomalhaut-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2f736890bb161d7829091a44884c79fc095594c2c5cf79d556a77560a690d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142349 Malicious code in exec-less-commitizen-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99abd01217e56aebbfb133b6b43794511bc65b3e048a0bb58821ba2d7898bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144663 Malicious code in magellan-sedna-warp-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d0842818438af83f0519e876651c3e0121da7de96046c41983e1a7a8bb173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143869 Malicious code in jasmine-uglify-js-cygnus-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68c8187bb9a4d759fc7a92576e1862dc9d507e32cff5c91a862a9c51dba18dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142169 Malicious code in eris-duplex-firebase-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140611 Malicious code in chakra-ui-cypress-juno-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cdf185ec38aecbc412f7e0635a106bdbaf491f09b8eb1449089a252ce03054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141357 Malicious code in csv-schema-alphard-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a9b936ae6b74c7d7229c33b08bcb2aa9deea6014c2edfef4494e291ec250af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144325 Malicious code in less-loader-phoebe-scripts-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0453a8015b61b94e10fc0eae56409daed68846374d696e999e769cf556719508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149304 Malicious code in wasat-vuepress-quantum-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54baa5ade6015fb6c9054123ae3a3e98a0e3155acfa1feb4ea656bd3a588600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146863 Malicious code in puppeteer-repository-pino-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdee3ffee1d89db096308708e2d9aa183d3687f0848cdd526e9576ca308d27ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139169 Malicious code in acamar-cosmos-start-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efa5ae8bc81623cf737a4266be3ae0e7ad05a0df1ec0880493ee4f35ccb7ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143062 Malicious code in grunt-envconfig-bootes-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f83987625a5b22f96ded6fb57b3a5b08594ac3a45b079c63a6905f3a226dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145588 Malicious code in nodemon-node-config-writable-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a645b9fd9876fc339f13eaa5d63fc1e9f3c191f707405651a572c7a8da38a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143848 Malicious code in jasmine-carpo-scorpius-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0e478b82bd4c6989f3b5401fe834e59f45fd9f764b88f40b4aad9210d51eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144632 Malicious code in magellan-dorado-puppeteer-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3238269c2f191b403634981c58aa5ffe63bdb37c7dc0633c090a4c8b8d264b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148064 Malicious code in socketio-sedna-centauri-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bf5c1589ac18e2c3471d0274bbd2f7da00cb75993fd0a325f908768672968c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147804 Malicious code in selenium-hercules-chakra-ui-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc938ef30744453595cc43f857769b3c672e59f89307afd341e5f45796c71534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...