MAL-2025-146954 Malicious code in quasar-jwt-chariklo-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e96037d1d468c6657b8199569db480a0d764b88149d9dc46c87c1d8bfd2d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140602 Malicious code in chai-procyon-postcss-loader-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb383055d39ccf72e511de623d5b1555ea9a47f86d90567d3f808175b6d3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143810 Malicious code in janus-firebase-postcss-loader-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c907e58d3064898e9b9c09eda9c01d441442c88ad82927681a0e077abd4c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148054 Malicious code in socketio-geckodriver-child-process-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992519d57d5eaddeba7d0d897fcfd3a9290cc2d2f620518393717a638329adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140622 Malicious code in chakra-ui-nodemon-gridsome-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ff566ea2abc806da64457f68e93782465c69d4c39c8050633cf66e6ff174f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143166 Malicious code in halley-semantic-ui-proxima-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6f4cd0746ba42cd6e48559c37cd5c225b99bf94116ae4eca429538f9bd221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144497 Malicious code in local-run-script-ophiuchus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb8344fa0bf708a5d389890c5264e3d60bb553c221469e2dcda9bf9d1a03281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149337 Malicious code in webdriver-manager-webdriverio-build-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a769157d32d7855f2e263fa2a168e8f0f4b9fe1cd1c23bd76f0fc64dddc57abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143113 Malicious code in gulp-celeste-celeste-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc22f76f8f70729c7e054321492c0f31c542d27f0daf0305af86a95cc709877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142938 Malicious code in global-hyperion-grunt-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c54953e6183bef1a92e3bf728ae20f23fa438ae368166505a8442364fbdcdc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142011 Malicious code in eleventy-remark-jwt-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc239a2ed1afe79b7aebfbbb3f1af622f246000016a43b3cd5e61154f7b71eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148185 Malicious code in spinner-apex-vega-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3ded697723159e25b1fedea15ec81ed13ad7288781ec0ec128abc82be828fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143334 Malicious code in hermes-xml-auth0-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939c611aff8a4e335a1a4820c2a72eac66c8e27637a83e7aa8e9fa29618dfaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144366 Malicious code in levels-testcafe-janus-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97af31e68543696cde777fbc0eb7742a0249f4e154cf3aee95513c66fb233463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147394 Malicious code in restart-quark-fusion-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c631713ec6fefd9d7cdb0891872d6a826be32ad71a4c25f3a8e2c3d9b5221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140357 Malicious code in canopus-ceres-start-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6cf436c849d3590009c01fd3be1f2292f845175f0191375f358643d24f99d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143457 Malicious code in hydra-socketio-fornax-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e4cfe4008f63bb69f79d8d2d28349e6ac22e9722c9a52f41d03bddbcb3ffb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146976 Malicious code in query-release-it-pulsar-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9d68133cc11dd8c7ad4eb57b193d34b5c67018ac38ae8f791739da62bed77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143355 Malicious code in hexo-zenith-cypress-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209dbb5037c02adda861958d0b5ac85293991d0133aa42e846b822f3389038bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147301 Malicious code in request-magellan-nashira-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb038937d8f4ebb3e7b9922687f8503ee4277c16c3b7389a6dd6a4e4770f21c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...