MAL-2025-149744 Malicious code in xo-auth0-sedna-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6115d7299c1ee0661506989c8b57a5b3843cef8f80d738a09ca55a831cd2c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148146 Malicious code in spectron-webdriver-winston-vega-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc6bf05534f02b480ed0ff958277495405277626318a639399b5bdf20a51899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139576 Malicious code in arcturus-start-pegasus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35436525dd6b4cf63fbf834e25dbbeccaf04d6ec773097a25064e9d4254286c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139749 Malicious code in auth0-jsonp-promise-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb40a31cd11f675d3723d8b1395719704e6175d0de1759fa6ee4004879d0d6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144880 Malicious code in metalsmith-janus-solis-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d32b29fcfa0498839d01be9c4a856f8c419b395efdc5d9599ddc46cfb37836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139883 Malicious code in backend-configstore-ultra-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3f101f40a801f8e4c2f3629648799481e226d2d379a8ff859c31cc54d24cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141867 Malicious code in elara-celeste-unuk-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224c7375ba8187319a69a0db35e2cb1ee4fcd46fa4536d4633fa4f99f79a0254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143812 Malicious code in janus-grunt-gatsby-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a924f0426ddf06b8ef2466546109dd481e0454ec09d04bba7947208e692a7a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142734 Malicious code in fusion-geckodriver-server-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958176f41f08e2a4e088ec62423745c59475d2e9e76c5efe48941dde7761aa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147733 Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143538 Malicious code in impulse-dorado-despina-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cefd70daa57b4e055538e0ce816ca1bb2a0bec9c6dbc3e086630de381272fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141759 Malicious code in dotenv-safe-lynx-ursa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef6b9e2958f19ca89796a67d8034d818d1ed8d5a1a1807f5eaa07c7468a92e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145875 Malicious code in ora-achernar-kinetic-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b3999a1f913ccb9440477973486798c1cb1a637ffaeb420dd26a67dd1f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139911 Malicious code in barnard-luna-pulsar-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a6771f76faef39f94576dc35d54f956339cdad234d7db3fc5e7ce40604123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141020 Malicious code in config-commitlint-config-angular-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bdbdc79d93ea440f525e4fd0e99adb460f2672fb88a405befb6ad65a363dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140881 Malicious code in comet-mira-lyra-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9a1aeeac3691d5a766fdca3a7307d890a9cf2c5a2f47a2dee1a19284483fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145903 Malicious code in orbit-command-geckodriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142467 Malicious code in figures-fusion-nextjs-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1463c83e9442351390e432473567d37b69c6d7f58d11c80760ebca55e7323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140692 Malicious code in chariklo-betelgeuse-uninstall-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1234dbc6ae148b6c7d9c6ecb253ecc1216b6fe4d01ecdc772f7a88426b83e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149897 Malicious code in zephyr-standard-arcturus-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfb0d4f3fef5875a28ff7fe0d5c62702914e16fec1826a64f35118d8a99b928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...