MAL-2025-142022 Malicious code in enceladus-auth0-leda-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ff5904ea8b5f8c969aa7052d1caef7be492c7bb6abe7cb68d1251dddb5d6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144449 Malicious code in lint-staged-commitlint-global-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b77175b845c66db53476f7ce9d03f92d733e55c29c84ccab5770fe6f45bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142190 Malicious code in eslint-config-apollo-uglify-js-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4aba2baee216127b0c025e606eb26aeea734c1225a518563943331c359874f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148176 Malicious code in spica-quantum-await-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c579da24df70ffc6fbf42475ea6f09c835ac823c2090fce27a08065d81176a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141338 Malicious code in css-minimizer-webpack-plugin-yaml-sails-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f36f379c02a4aeb332557421581ca50f533617fe1d1ca4205afd44dba60103e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147024 Malicious code in radiant-spinner-prompts-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672b586fc704e80537020f4425ed8b4ba982e4a9c98f2cd2c6bc5572b9bd1e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140713 Malicious code in chariklo-socketio-json-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2777a71a408df661dc26029a35d31cc970041c51b3816927289ddc328f01cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144822 Malicious code in meissa-passport-nightwatch-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bfdbeaa33d509303893aa88ba142a86d0c594efb237776d47613f604bb0d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141024 Malicious code in config-ganymede-hugo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972c4937b0a1a11715489b02260c4d19fd928a94e7a408ded4575366da6e0fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139945 Malicious code in bellatrix-nextjs-jupiter-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1de40fab1d77b3995ee4b7c22866b53c55a021ce44aab33a3bff0ed6b29d6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142234 Malicious code in eslint-plugin-nightwatch-javascript-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b333ff43ee1f9be398cf888d133ef6f16c4abeb587460d88c4ae7d5a8173469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149790 Malicious code in yaml-gatsby-yildun-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9176cc856a7e1b77aae4968733ab2bea8d8ddf71d2233a9e6f1ef1c0f9e0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148126 Malicious code in spectron-webdriver-betelgeuse-odin-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08851659b6a53ea323142e60510fd2ea2215b5c6a75a5928f0eaa11a6e6e9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-soap-vortex-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385e2601e243ff5a96bff2b732ca8a19c8db68b7250400cae9ff4e8e70bb5f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-comet-csrf-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95efdb76a77c45a47564e1fc7a242ae41eeaa72b4429cab3af068e68a2d8772a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-bootes-framework-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6c563df6fe1722782e28266c6ef475dcd31541163f0920d045c902f8a088c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-duplex-upgrade-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea0537e1d4f6441625d140f225246350b2f419c999df9095d0aa0b6fdd48e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-frontend-csrf-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c2450043f3735e544391159d66ba4fcfafa0a14422c926bf869d2378dbbe74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-miranda-changelog-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66180cc95ece5af12d457fd622a3af203c17b90bb2ac5a47ecca155fc5308be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-subscription-apollo-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d87b5a1516b2518c854fa644e90a91b1a468ffd9573c8e3afdc5a5b68de7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...