MAL-2025-140674 Malicious code in changelog-markdown-pdf-rocket-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3727a07d660807935d10820e328470b6bebdbec4098c36a571a58b6eb4fded92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149092 Malicious code in vega-jest-leda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97bcabc2b8fcfc5de703127ae1c9a7161c8f7d69c0fd95ffbecaf28045c4da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141632 Malicious code in development-server-electron-builder-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5665caf467f0f567035e4af0bc17752525fe75d750c4233aaaadc7d9522ecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142860 Malicious code in geckodriver-chai-hyperion-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79d495abb6c1e5b082bab2c49a939c1066d9169d018a55eca80c287333b651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145588 Malicious code in nodemon-node-config-writable-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a645b9fd9876fc339f13eaa5d63fc1e9f3c191f707405651a572c7a8da38a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146731 Malicious code in proxima-protractor-mira-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05006d9d7135e2d50bc05fbcb93a478556d9f31bc654760d8bbe915920ba941f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145848 Malicious code in ophiuchus-vega-xml-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf5930561813e8034bf3a62617cd99f9c8522d2a4e61604426d8545cac757a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146470 Malicious code in prettier-json-tailwindcss-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee324e231c84dbdd64e4ef7407cb835517a03e0f5190c29b420a89b03dbb7410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145433 Malicious code in nightmare-dynamo-meissa-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f432e3c88b4f234e7077788b7b05eb8f49ef8c5568c00a24927111eb4f0c3c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142349 Malicious code in exec-less-commitizen-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99abd01217e56aebbfb133b6b43794511bc65b3e048a0bb58821ba2d7898bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145066 Malicious code in mocha-aldebaran-sass-loader-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4e7e98e5605c713059061d8faf2bbea600f5c269f0c61c5dbfd5a723d4c601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-cors-sadr-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0530075e6b1e45faedcc08afe86303c56c19cf2b046d0fa3f42018e2fa10b1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-protractor-auriga-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6c74e5d8b67a20911a113bf65794db83dff4dbdd74a3b2a604963ae5a756e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-passport-prettier-plugin-markdown-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cbb9644d6e2a6ea49c021e47526c36a9c49d25715d531b0e999691733fd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-enif-octans-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35d0a5b9ffc2decde1b6cc5b23bf7b0c2c7016a282c07204a34fd5864eb48c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149191 Malicious code in vortex-scripts-scripts-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0409451d1fd539154e63a0e4b69cf370ab76eec634798644da864bf87004163b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145463 Malicious code in nightwatch-deimos-leda-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8475c1c266d0e690c2f9296e115ccc4b101bfc71735de6f158cc7dc1336c634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145915 Malicious code in orbit-triton-request-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0261ff5b588ea919078250bc8c577b2e6b1e52d783c8bca73c12d506657f70e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141039 Malicious code in config-sails-repository-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef22d2e7c169092869951d0002a750ed5d23a4793af0396d7f0f5460b51b67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144002 Malicious code in jsonp-nightmare-leda-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fbe40f02d657a7917d90b09bc7249a176e5ee2697ec8b356d4d57be89d66fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...