MAL-2025-143241 Malicious code in helios-uglify-js-nextjs-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6948ab4c43a4459026e7fab984c2823c9512f7a3204cc4437e5d1a651020ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148943 Malicious code in umbriel-install-cygnus-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3984b121116c51f60b755a0d8e1f5a46665a65c3bbd051e40d65369d4d8d75cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147283 Malicious code in repository-transport-delphinus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0fdc46c42635553bfca3774fe744b2f18d608d3c3168032ef8cc6d1e097991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142864 Malicious code in geckodriver-forever-eslint-config-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e474f0bb15ac64d99eb8c5656bc4569ae5da7d444d529a7f2b083f234245dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145104 Malicious code in module-frontend-toml-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf77bba0885f150e6e4f84b84c43c446109c22577967bb4298dd8ba4cb9186b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141330 Malicious code in css-minimizer-webpack-plugin-nextjs-ignite-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d9bd9c8e57a6c6ff9133b038b3361debed513ba20197e82b6ce545a7005e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141922 Malicious code in electron-meteor-command-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8725cb8d00cd993a2f9b100963405457a5faaed7d6d3912b00470a91b3120371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149120 Malicious code in venus-request-loglevel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628ad922bdf929ddebb5c4e0f9679a98b148d988f858aee6e97267b60eb8ee26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140420 Malicious code in carina-phoebe-materialize-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e51fffb63b35e5c202571729d564d9d00f081b4a074da1e29d847410d5e428a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140390 Malicious code in capella-kaus-global-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699839cc245a757edbe4e1980aff3716ed5cbb4f51e2786662d90515c8014ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145844 Malicious code in ophiuchus-spectron-webdriver-subscription-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bbcc0430e599d601acbf2f5ccd63513ba9fa4fcaeb3ab76b6221416d6c2a85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143768 Malicious code in jabbah-aether-heka-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be60625e4315cdb6c9c73d8ac61b43d26e1c358e30d28b381c9ce97b78e7a6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143152 Malicious code in halley-kastra-protractor-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365fe0a63c20149690dcf1f1b85f28d23d1ff090941574f9ef4c2479d96c323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149550 Malicious code in wolf-halley-weywot-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79152fc68ee06b388c6de6bac66d040df85122fc65d62bfd1a1709693e970d4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145767 Malicious code in octans-cross-env-json-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980d9c7fa3ca9b291ece46c179901d948eb4dc5790702dbe2e3b7d7ef2e88927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140112 Malicious code in bootstrap-leda-selenium-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e650671be0ef8bac882b4e76b16496a2ea7e4b69e60ff77dbd599a4079f7d705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145351 Malicious code in neptune-antares-impulse-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e4aeec5e35aaa7df7ac4e19b56ba63478ec0c9494c72c93d7d0c2bd0eb5ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146958 Malicious code in quasar-rate-limiter-changelog-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fc9114b2a03607eceb91b226e779174e19177fa53be111b25fcc6cce8a74c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147772 Malicious code in sedna-janus-aether-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce5f408158a22ae9ab0a73f336c45a653252c9211ad2147a279babe6f3de397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149519 Malicious code in winston-phoebe-aquarius-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3e18f836ea20c718126239c6f0b5144bdfb179f02bf2b541be3c5a02809c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...