MAL-2025-143125 Malicious code in gulp-webdriver-mocha-yildun-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204e94d6ea198d5df1a1fbf2ba5bba87ce888ae2859eb0febdbd54e436e7238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149753 Malicious code in xo-rehype-phoebe-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f8ff4407903bc32c0dcdb711304ff649dd3492040e25b4f66f198e6940d911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142706 Malicious code in frontend-jupiter-writable-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca3ce2a7f57e4a4c5d993b8e33302ae1c04773f290a3bb65bd819552cce3b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148019 Malicious code in soap-firebase-nightwatch-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f37f34e70ab54cb577c3b5393d72a3bb5308a49948e253e1e3981913b4212cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148632 Malicious code in tethys-sails-perseus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3781b66f86852a017c7d3785175a035c8bfff62de65a6850dee7f41c67efd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148901 Malicious code in ultra-nightwatch-commitizen-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba7ef101351f596629e0364d0b2222171328d574d9ce623ad8780380fb406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149512 Malicious code in winston-neptune-standard-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6100c7d0ff6d29306a6d718fbbbdcad4feab4d3512e557e86af8454531cfdf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148969 Malicious code in uninstall-sass-loader-pegasus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91affc7f9bb256fde82c4268b20d43912ffe30773a0fae9ed34039f4e000131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148123 Malicious code in spectron-redis-xo-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26507e079d9a939a5ac7f3360656f3c2de560dca7b8b275b5fbca2ede529c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139242 Malicious code in aether-sqlite-meissa-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29327f59a8318f6abc51bcfd6abe17a7008f1530fcf43b381c55f14e7d32ce27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144067 Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2af6812199247ede8e24f95898a6078f72f1f090e8bf50ecf30c6f91ca063d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146622 Malicious code in procyon-update-nestjs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706afd176ee6df8e6faa2ae433810bc6eea5e2fa845c2dcc19eb0868e4602449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149276 Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-jabbah-nodemon-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b2182e2ead59f86384be92273d8cfde1f64d3a26d5586e5239600a73b89eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148708 Malicious code in toml-cygnus-proxima-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4194b5c1fe6cf03d68132eb00a7abf5850a2a63b9ef0a9547447561276b22041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148625 Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146985 Malicious code in query-wezen-ophiuchus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963978e738e91b8096361f2d0993dbf63b1c2007be9bf4deedfdc91631600f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142694 Malicious code in framework-rigel-xenos-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea682a7772329c2722aec8ab0885f3f2680f15f20afa3d09c05cd2b909698d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149346 Malicious code in webdriver-mocha-deneb-transform-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150ea790515c59425cfe2071317b21fe51c70785ca2b2d6723de40588ca26b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143046 Malicious code in gridsome-library-jsonp-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc5c16176702b84773f164a05dec951742e942a5f7b658af063f0cc6480aa19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...