MAL-2025-143727 Malicious code in iota-helmet-express-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42282ed6206029f07bd399aba888e5b4efff6d0382970bd2d500ca5c6b392656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140680 Malicious code in changelog-query-adonis-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505950e51b56d621a77add998a0876538ff548e95b7af30b6c58c1158b1a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147168 Malicious code in rehype-eris-algol-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa52e77988c744b88131fd41aa547759e2c6ce9957fddcc2632329184357735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141392 Malicious code in cypress-apollo-geckodriver-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced988c87086bc25394561fb8f6677821555c9897661d3f388d6bdc649bf4325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141024 Malicious code in config-ganymede-hugo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972c4937b0a1a11715489b02260c4d19fd928a94e7a408ded4575366da6e0fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148176 Malicious code in spica-quantum-await-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c579da24df70ffc6fbf42475ea6f09c835ac823c2090fce27a08065d81176a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144822 Malicious code in meissa-passport-nightwatch-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bfdbeaa33d509303893aa88ba142a86d0c594efb237776d47613f604bb0d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140713 Malicious code in chariklo-socketio-json-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2777a71a408df661dc26029a35d31cc970041c51b3816927289ddc328f01cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148672 Malicious code in titan-buffer-sagitta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd25da2ea12c17bfcc8b82c1f080529ed705b80141907868b255187769fd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145608 Malicious code in non-blocking-dotenv-safe-got-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ec042cfe2b369dc9c550415ab4881c8b222e5b9e1b1ffd6d863083eed4048b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146387 Malicious code in postcss-eslint-semantic-ui-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0f9a98498be315aa619608d786350a8e498f80693205f92a211b1ce4ca3f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149138 Malicious code in version-janus-hyperion-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427704e8c1914d68ba387b56c941a250f60c48b69b5a5441fb65e0f26bbee07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142022 Malicious code in enceladus-auth0-leda-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ff5904ea8b5f8c969aa7052d1caef7be492c7bb6abe7cb68d1251dddb5d6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144449 Malicious code in lint-staged-commitlint-global-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b77175b845c66db53476f7ce9d03f92d733e55c29c84ccab5770fe6f45bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148126 Malicious code in spectron-webdriver-betelgeuse-odin-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08851659b6a53ea323142e60510fd2ea2215b5c6a75a5928f0eaa11a6e6e9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142234 Malicious code in eslint-plugin-nightwatch-javascript-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b333ff43ee1f9be398cf888d133ef6f16c4abeb587460d88c4ae7d5a8173469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139945 Malicious code in bellatrix-nextjs-jupiter-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1de40fab1d77b3995ee4b7c22866b53c55a021ce44aab33a3bff0ed6b29d6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140193 Malicious code in build-terser-chariklo-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed23b79eed8301d5dd64081b506129fa0dd8086dedc7df9b4ba9d963e3bae94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149790 Malicious code in yaml-gatsby-yildun-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9176cc856a7e1b77aae4968733ab2bea8d8ddf71d2233a9e6f1ef1c0f9e0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142190 Malicious code in eslint-config-apollo-uglify-js-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4aba2baee216127b0c025e606eb26aeea734c1225a518563943331c359874f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...