MAL-2025-146703 Malicious code in protractor-xenon-docusaurus-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18e6ac6c775039d3c19b111ee39a4af9bcc6553cab555cb4dc856a71bf73970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140284 Malicious code in cache-shelljs-europa-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f9bf5aeb82678510cbe2137300b8fb946e38374af64295bab38733b1bc607c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148908 Malicious code in ultra-shelljs-aether-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7346b040e81bb689df3bed542cce8811d5d73d35a48936f4312edb9d0c62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145131 Malicious code in mongodb-impulse-cz-conventional-changelog-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b8b360a5dadb05d9cbb10f9de323e7fde5d751877b4f12018344d078f414a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144576 Malicious code in luna-pegasus-nconf-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fa455b2059614d207d686005cf0890c87f2061d148044477b6e8eafff85443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149526 Malicious code in winston-server-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a935b48f23055193d417855846e711c8fde219f4087d81c066ddacdb7f0d3e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148105 Malicious code in spawn-registry-hapi-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce6c4931686578ab6925d8495679d37db70997bb5117ee12b15a35a4b0af5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141288 Malicious code in csrf-levels-terser-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0119e00e1c8dc62089028a6be74894353bf9c1eabc5460e57721cdaa4ce24bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142919 Malicious code in gemini-websockets-pino-pretty-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6200ea4c861043caff0367692838a45658c6405477752eedfc75c3d36d1416b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145026 Malicious code in miranda-config-odin-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a68ff1ed630d807e3bbbabbe5a34ff698f471826af4bab49a10070e6b40639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146783 Malicious code in publish-ganymede-cosmiconfig-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8346c1476dda7d46c13bc79d119a9eb3a5dcecbdfabfa1d013f4c6ca36e55b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144022 Malicious code in juno-comet-meissa-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902446a464f790e026bbe1b3e2bc37490b51139fcc3970a97b23c430af7f9968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140228 Malicious code in bulma-sadr-registry-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49139fe083040a54e336806ef9971053450cdd358b3f344e5848b86fcccf433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149602 Malicious code in xanadu-mongodb-typeorm-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b3004b09815b865e7aba8cd396701e03e6857c8d9e9380be68a316412b075f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140196 Malicious code in build-ursa-hugo-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7043ea5597e37c18599f3323abe2d66201a04519ca5d9b94a7f1aa2905a9506b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141325 Malicious code in css-minimizer-webpack-plugin-eleventy-writable-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c809fff64854b81d5e2dd566778b8b3f0b3593ce2d0a3267e2f2772472b028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146983 Malicious code in query-webdriver-manager-writable-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912021368ecb1501d6500bc85aa33d7f26dd016c69d92182789f990c2a475792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147128 Malicious code in registry-fork-terser-webpack-plugin-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5f80d581068875ac320615ae15a242874ae033d46442d41454a22228f38a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140097 Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149065 Malicious code in ursa-oberon-antares-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5bc84bc4c1d6cc887b8ad39364182e98b520f3696b8bca8c88a8fd6773b484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...