MAL-2025-148683 Malicious code in titan-markdown-oauth-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b3aebdea90601592663add6a87ada63bdcf39787421dd0f0ae1f71b1ec02f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139550 Malicious code in aquarius-sedna-lint-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e39ba57b7192f42133b9d75ca50578b733c485b36983ce205e871e9a2c23047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148275 Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ca9dec5af3f6986b7abaf03d78477121b87d0e5875637fd40a490404dd5368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142743 Malicious code in fusion-perseus-global-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca61a064c244c729ce59da09fd651affa69b1ca3d9dbdbf0f32887f5dadf1700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146958 Malicious code in quasar-rate-limiter-changelog-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fc9114b2a03607eceb91b226e779174e19177fa53be111b25fcc6cce8a74c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142237 Malicious code in eslint-plugin-process-sails-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54131fa2d2dcc4b78de6cb5b6d09342e6dc5740aaa9fbbe5e0ec5cac6985a259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148528 Malicious code in terser-meissa-firebase-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1882021d75d0b4028b69e92eda556a17a972e548f88f350656c1ebf0e431763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142035 Malicious code in enceladus-registry-middleware-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601890e34a925807750aede5392b74fe8ff57a1b3b1d8bb57429268b8cbb429b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147439 Malicious code in rigel-radiant-uglify-js-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85630c33cb4c0ec6a482317d825de7dd864dfc1abf5642f7f91212d8139d7c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140816 Malicious code in cli-vuepress-html-webpack-plugin-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2432237f1723a37335764ec0a92fa5b96656aaf81ad501680076a8e1b4d646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144926 Malicious code in meteor-pulsar-prompts-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea703e4ae5834db4e876cc760b1a58ec2cd07a7e560a94aa532b291a434dab10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142864 Malicious code in geckodriver-forever-eslint-config-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e474f0bb15ac64d99eb8c5656bc4569ae5da7d444d529a7f2b083f234245dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140604 Malicious code in chai-pulsar-carpo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140392 Malicious code in capella-meissa-chakra-ui-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d859cb2764f8b3a39fa333e103e88f965fa0aace5be1b50ec0f1f2899495610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143840 Malicious code in janus-webdriver-manager-promise-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1d8c34aca7485379061d221d2cf2eb91ed7e807af9137a758ed65d979477a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144105 Malicious code in karma-fornax-react-bootstrap-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692a2c9da87e3f2f27a132a25c2aa343f1b3f5c7d705d7a5a74fbdca38cf1da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142023 Malicious code in enceladus-betelgeuse-nodejs-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a214e3efeb5ab890583b8fbdd9950fe8de1f2f78df13e65aaaa8892a71e73dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146707 Malicious code in proxima-backend-solis-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47debd0e472e359f6d7a9c6d07a2396dd62b9eed5f75d70e652ee1aa399ed61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140004 Malicious code in betelgeuse-scorpius-postcss-loader-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427e7143da6bb276367048b0c5b5503a017feeaf6621d126c4520ebf2085c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147899 Malicious code in server-framework-andromeda-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bf77a21aa60073ee5c5f6339fcbd7faac1ac57a81404777827d4cd1dd5a0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...