MAL-2025-141392 Malicious code in cypress-apollo-geckodriver-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced988c87086bc25394561fb8f6677821555c9897661d3f388d6bdc649bf4325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140680 Malicious code in changelog-query-adonis-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505950e51b56d621a77add998a0876538ff548e95b7af30b6c58c1158b1a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148273 Malicious code in start-jest-umbra-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a714daaf767bc9fef0910ad4c37405fcbc88ae14e3ddc1bcb4bb91c35ab41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147180 Malicious code in rehype-procyon-tethys-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad506c5fa209f17fb6c2d1c69360e696d326b007be2923e5570d9e7913a54fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144822 Malicious code in meissa-passport-nightwatch-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bfdbeaa33d509303893aa88ba142a86d0c594efb237776d47613f604bb0d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139219 Malicious code in adonis-virgo-cordelia-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e07b7ec5a3ebdcdcfced2c14aa60be59406831219a126661a9b616532b03b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141102 Malicious code in cordelia-meteor-figures-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2f31812e41d80802d25f048b20a70c312ee134f0351b57c00e9e1987bdf010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148350 Malicious code in subscription-betelgeuse-eris-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bbc248434dc37daaceea3a7f4dad25b6c8753a252d0a9d17ac604927b4d765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139945 Malicious code in bellatrix-nextjs-jupiter-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1de40fab1d77b3995ee4b7c22866b53c55a021ce44aab33a3bff0ed6b29d6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147653 Malicious code in sails-neptune-scripts-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a8c4d785880a4830371576fc6fc390a6d9f398e94cd295857726be3b82befd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148199 Malicious code in spinner-hydra-mocha-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef413f567ba077fea84d7d2996097ce31721cd68e7bf89ed81889d68c55bf1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-helmet-vuepress-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca2a0f227ecf5dbd238bdb4fdf614d28c9f11da0fb859e447e77910ac1e113f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-antares-google-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204408f6254a7b497b0c72adb8496ab013f648f046eb3bf4427efeeaae9de8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-phoebe-commitizen-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c7087b7b287470476889ddc426136442abdab2d013c904a1f9e9d558f3cbdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-nestjs-style-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ead96a3c959e7edf3cd9bbe01b3683cdfc8844591b5aaf62c39fc03d8343a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-hyperion-websockets-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d8c2a87fac657e462b3cf084ceab4d755bb219d31b4880b1d4e1b6ba1a7e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-stream-cli-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-uglify-js-optimize-css-assets-webpack-plugin-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8cc6fd533950ef5b378f16b40b3c8fb9577c5a2423c4c92ab9c4bc23264c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-cressida-sequelize-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d60ba7cda25cda3a3bfc8e15b4f112403cc1c5df0679ff03785c3356c1e4229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-update-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bb678b1ed3006cc02805d7c02037af3629895bb1fe8d7676c6660427ff21e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...