MAL-2025-146216 Malicious code in pino-dione-bellatrix-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9840d44f2a389828ef9c0fe355b540802f5e57de2ae2df10ca862ca55fcf66f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141481 Malicious code in dagda-protractor-lynx-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0777c52ef5f09972320dcd393bc8cc30de3e52c2794141a8d80b22c22325e465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144079 Malicious code in jwt-magellan-sedna-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e629e5f8244e009f62ba596a0f8673d57df9c096f97c189ef541a0cd216c630a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145959 Malicious code in parcel-gravity-lynx-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0aed86a0b9aca73d4fc0368b4d3dbb20665ce2b49f73ce2a0cdcd4f93f8a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140194 Malicious code in build-triton-webpack-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0445dd59b462201888dff87507cca5d90898111de33c352dc7250b9b0426d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141132 Malicious code in cors-registry-cross-env-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097b8707ff937202a007e6ec522d6f0159c12a69f763bba77779bf43607923ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144171 Malicious code in kinetic-exec-spectron-webdriver-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7effbcd1496d9a2517931b273a2bd6b3fe910ed3cc3d39cb648b766711de01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149550 Malicious code in wolf-halley-weywot-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79152fc68ee06b388c6de6bac66d040df85122fc65d62bfd1a1709693e970d4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146030 Malicious code in pegasus-geckodriver-octans-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167d798242c1736c657d16fdf8c788f38667bd86fde31f541aa0f72a178d594d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147772 Malicious code in sedna-janus-aether-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce5f408158a22ae9ab0a73f336c45a653252c9211ad2147a279babe6f3de397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149140 Malicious code in version-mdx-development-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7ea97e441bc8365483bdd5542b8f2597dbb2c78a69fee43619fa2f272459ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147976 Malicious code in sirius-rollup-despina-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa05f73f303538e8cd6f0ac16009ddabcf7a71a2bb068c2a2ff4856715ddf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148197 Malicious code in spinner-geckodriver-framework-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11eda0eff3a31bf162a1a763e086ba1b1fca6028f2c5d4fd7921103126177464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-phoebe-materialize-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77c740aa11ca859bb2f0ff0e894580beec61fa56684a200b3bf75cf08ef3ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141029 Malicious code in config-lint-staged-backend-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa2fd9f0627c17d5d0055e00b56430f9ba1fba381331f5a5942ea674862a810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149405 Malicious code in webpack-public-uglify-js-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92633050fb8adf6a74a175f582df02a6039d7469d7d6b33ebfc02ab978a9fbbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145647 Malicious code in norma-react-bootstrap-commitlint-config-angular-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2830a2fb96d2b57865f9092fb10f30f5a3f718fe0e9e982c4761680dc9e7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139189 Malicious code in acamar-update-postgres-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb4db31769e06077155f89e26bad96142790087e079fa0db3fef030b6085eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141674 Malicious code in docusaurus-pulsar-update-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c511d5a2ee8f9a523e4d749bd04e47f8df8f083c1a69cb00ce364a7c709c6a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147448 Malicious code in rimraf-dagda-sass-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08cf31ae06b8cfe4006f906ef9b24fd19a4e3179eb3ac12b3d42f4a7e37ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...