MAL-2025-139883 Malicious code in backend-configstore-ultra-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3f101f40a801f8e4c2f3629648799481e226d2d379a8ff859c31cc54d24cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148599 Malicious code in testcafe-ophiuchus-xo-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21214842cd4cf23c4aed99f5eb4277c186325847a0fc2aab7e2c03f867aecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143791 Malicious code in jabbah-spectron-webdriver-procyon-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1135c573e6af1a5857f5370756b236e890589ee9f51d736363bb5287226b1f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141867 Malicious code in elara-celeste-unuk-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224c7375ba8187319a69a0db35e2cb1ee4fcd46fa4536d4633fa4f99f79a0254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148043 Malicious code in socketio-acamar-pino-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f52eb5feb86456ab516fbdf3dda48667262ff5ea6e7f05e4fa7fb2ecace47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142865 Malicious code in geckodriver-hexo-node-config-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9530b02e469e54b49153909a3ee6445e77fd868b15f80e7d9f35f3492765f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148676 Malicious code in titan-cluster-yakutsk-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab45250d9d40c0388aebade6b47a021c64a31a23329c3bc89a86aa9242321f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147488 Malicious code in rollup-atlas-electron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2af1ee5d3e4992b88a68bb2875b0a18c7257ad9df640d557993353350d1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148624 Malicious code in tethys-mongodb-orbit-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8205abea7e11d1c740f134019ee61eb9cf962418ad662c7ac652238e7618d368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149650 Malicious code in xenon-mensa-test-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734533733cb93e6d7ba24767567df55e07992b9ccf15111dc99a7dd30db9cc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148530 Malicious code in terser-meteor-element-ui-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41505bb8f06c3abba6713e2918cde0849952204503e238e0d3620e4f58c5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139749 Malicious code in auth0-jsonp-promise-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb40a31cd11f675d3723d8b1395719704e6175d0de1759fa6ee4004879d0d6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147746 Malicious code in scripts-sadr-parcel-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d4129ff9bff98bbff961f993a0ce01ca0fe2ec0098fc4f27ecfb22382b00c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145302 Malicious code in nconf-alphard-electron-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56efbf37a7c3c9f8f377dd8543c4fb306af60ce943f5db4d631ad8a3ddc5a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148484 Malicious code in taurus-weywot-zenobia-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542d620ec307287a2edecb637cf7d0cc4db339f51baa18744193fc284ddb2748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-hapi-stop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06034557f70b334c9c54b7ae8eeaea3fecdc5515f5f60638224fd9b47f87a83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141042 Malicious code in config-umbriel-tailwindcss-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b504ad2784be5eabf4f348d8bacc2bca3fca7f160530f9e1132f55d1142e1d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144047 Malicious code in jupiter-altair-sagitta-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2cbf7ce2f61cd396dd92768cf8f3c8b83ebd104b8aa54aac8d1ae5356dca391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147733 Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142283 Malicious code in europa-nestjs-cosmos-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc8e88e6c85f9b975d811d47058e107863c59bddcfa9e2eda21338316ccdc67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...