MAL-2025-141212 Malicious code in cosmos-nightwatch-sync-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6396605102581091e612ef14599f18dc9d5bbd7d8323fe8a10dad551777daa5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147005 Malicious code in quito-subscription-neptune-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70002200c66b5b4cc0f28f3f46ad6a34726cb88aae438ffc6a091fe5ed4e7af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140187 Malicious code in build-pino-pretty-frontend-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136bd760b092d361738315dc7ba6e397b79b80fa76ad0d08a50c3c277bd10a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145486 Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9188b5e4608aca9ab9241332c97595f1497acd8c7a5c7f5ed46cfc93609c0208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142610 Malicious code in fornax-centauri-ceres-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4292f5a1b31a9d321a2eb9d21512f8235d0431796f54ab26eaf817f2c15b8d92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142738 Malicious code in fusion-jwt-eclipse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276ba37349ef51c2496f3657d01bc7a3a3d0a9152a6d37a144b42229df1956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145782 Malicious code in octans-transport-parcel-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f861ca8dc68e2483be5dc5e3fdafa633fc9d3dfb50747bd13e6decdf733fff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139591 Malicious code in ariel-mocha-blaze-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bb813f3180d8c2a3d291e70bc1cea255754fd1747760b8056687de594dea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149332 Malicious code in webdriver-manager-private-helios-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7081f24b37a858625c177c44edb0282c8634acf916b9c19196988d6877ccb140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140861 Malicious code in colors-puppeteer-got-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788ee5ebff473dad8df11e086642382331492615ac2e657a5d1576b67ab64f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140023 Malicious code in blaze-hapi-cordelia-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2782e9e52c196340de0e31caff03aa3bee08b7d416ac2a4d310277517eed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145041 Malicious code in miranda-less-mensa-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc4e4c231f13e5fecc93bd7ea1c4f26d7f4e00913d6f3b2104cb008a253169e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142867 Malicious code in geckodriver-indus-testcafe-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac6d6d3632fc7594ebf9054a1009c068360978acc3d27d397bda3fae304f1ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142773 Malicious code in gacrux-nightmare-electron-builder-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4014bb2f2419fca4fca93e72a600a6fb2d56786b81f6dde8040e3a24004ef7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140496 Malicious code in castor-spinner-async-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7ffb45dc2db3ff1f356c7e393e67f1de1d339af5165815c7bc65a9702f209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149563 Malicious code in wolf-sequelize-gatsby-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78340600d9c20207ae07ae4fb9e083761d01a2ac04e758d93763657b86ccc844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144256 Malicious code in leda-andromeda-spectron-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abc359754b3b2e393fd80d4121b35f0c9773f28d7e42125af828ff7505287b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145406 Malicious code in nestjs-webpack-passport-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3120d77982b49a74bb943a9a9759191fbfde37c742c6293bdc261cfe16a46a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146403 Malicious code in postcss-loader-npm-child-process-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2baa6ea4e8409b7545bd6962018674d00a779c56899d8c1f5ab8aa47645dc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145130 Malicious code in mongodb-halley-pavo-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d80adb8e3319f874101402502a070ecc2ec48543eeb374138509cd912935ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...