MAL-2025-146569 Malicious code in process-selenium-quasar-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c223c3e8c566dce16e6ff836337eead79651732149440d97da8f0b3531aff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148472 Malicious code in taurus-mdx-promise-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c325e367241c5e965dea2194667e8e615c49c2186c63d7e8bff622220960ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139640 Malicious code in atlas-browserify-commitlint-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1d432cbc38cd2edea7a8feca2f8f380d754cd24a8973d59c7454e1e9453380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144819 Malicious code in meissa-ophiuchus-less-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8518a814cafbac1fe3b24bde9c440231a89ec97e3377a71c305e1bb5c795f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149160 Malicious code in virgo-levels-magellan-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f439c2f047525b2c03d5156c206513137778e006834e00a3b032afff3ee67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149527 Malicious code in winston-sirius-lynx-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3250323d484e817f69507a804d6b0379ef2de404ac143263edc581d1201620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142553 Malicious code in fomalhaut-spinner-capella-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0e8d1ddde0788381e96ddabfe8341e2ff22da6843eb0046ffd53de5dbc0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147490 Malicious code in rollup-barnard-chakra-ui-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d503b1e2061b46d61e17f201e8dbc899cb29441b3bdac807ce5d1e4707ef79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-castor-yonder-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d988bdba1d2463dac031e9b4361d5cf5f8e29905aa4c542b324e6cfe05c62bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143054 Malicious code in grunt-bootstrap-mongoose-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02da5fd610445f9d8951ce43052f42afb6e06fb32c013a06f436322f3aac6fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142354 Malicious code in exec-nestjs-request-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e72addbe7ca43e486f1bf024c753f5b5a2fcc5d9d1ddecf6e7c75fd7c238ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144848 Malicious code in mensa-enif-magellan-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533e0ae285e04abc18553b4bf644ea798de190bdc453f5ebba48f4bab21c97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144152 Malicious code in kaus-nightwatch-uninstall-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286ab42f83d6741c033cb2b99f8f20878c9cb39ed9d7b2fad08c6a6ffbf55388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148197 Malicious code in spinner-geckodriver-framework-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11eda0eff3a31bf162a1a763e086ba1b1fca6028f2c5d4fd7921103126177464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142117 Malicious code in equinox-centauri-lacerta-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af7e42dd6ecc2d5e444e441dbe9d246c94856bc0fdf210e3b3ba99c7d462551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-octans-gulp-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c04744516354a46168a3b4f2b000db78743727db300bb9c7527fd54bac5d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149220 Malicious code in vuetify-protractor-dagda-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b637e3a96a8fe046e69b6725f7e6c57b244ed0b4bf061c54739495dabf5ee66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145732 Malicious code in oauth-gatsby-titan-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95122c10877f12bad936946a3f7eb7211935cd5647639dbae9dd654ce2166a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141308 Malicious code in css-loader-metalsmith-reveal-md-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f19ad3942aa64e870b1cda93f1d3230e067423845a5b4c5d84fbd34acaa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148854 Malicious code in typeorm-pipe-dynamo-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd526b77bca572558b6629ea1fc82df9ec7e21431c1e8778e939cab55920069d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...