MAL-2025-143934 Malicious code in jest-slidev-express-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99742a9afa706416250e8233ebcc22cf97b90e33d02d629b60b8e46448a1b395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143840 Malicious code in janus-webdriver-manager-promise-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1d8c34aca7485379061d221d2cf2eb91ed7e807af9137a758ed65d979477a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146164 Malicious code in phoebe-morgan-install-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab149e6b00233a3917e702b778911be536e064049d6f4363b601405122a9e30e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149190 Malicious code in vortex-request-websockets-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d27d80aa80b3476f8aacf646ef4d6f99528afde9c24988a8d62218931ed277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-kronos-protractor-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2613bf60636387829ca0905577e948da2806d337f061920b907c9fc948430379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-aquarius-prompts-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6206ff487ec40eb65e8f7173869d22aa14bac87e0735273ccf10c371304274ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-odin-hexo-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b0d249f0e04a222afa4a1c8e67c735869b48c62e1d747d50ce0bf55860b905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142390 Malicious code in express-pyxis-sails-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1185fc0d42439e9df48781b08bbf46abcbb40b9f5715d77e835e5d53d1bbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-rigel-webdriver-manager-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bdc0dfd44e9ef24f1f26a65a9dde8fe116137932c6a13652c8544024480f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-fork-duplex-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48a8f8e9584bcd0ee1d9248dc2632136833d6ebc03be0586db913fef52dc183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-sedna-webdriver-mocha-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edcd3a5638cb84734581316b37ddfc7bb43dfa6c1eb41b1e5f4a1d0cf3402f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-galaxy-aurora-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f293f054052487dd73afb9445478228a67e98095f859276268342d2d2dd339e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146744 Malicious code in proxima-stop-chariklo-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144e30f14e66397a1b132474226e3be01e15f725b235ef6adce6f137588a7773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149877 Malicious code in zenobia-warp-markdownlint-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b18dfe08f8107037841d2caef366d4f4b18d08ebefee595d3ffcf27fdd1a5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144171 Malicious code in kinetic-exec-spectron-webdriver-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7effbcd1496d9a2517931b273a2bd6b3fe910ed3cc3d39cb648b766711de01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145351 Malicious code in neptune-antares-impulse-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e4aeec5e35aaa7df7ac4e19b56ba63478ec0c9494c72c93d7d0c2bd0eb5ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145104 Malicious code in module-frontend-toml-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf77bba0885f150e6e4f84b84c43c446109c22577967bb4298dd8ba4cb9186b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143152 Malicious code in halley-kastra-protractor-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365fe0a63c20149690dcf1f1b85f28d23d1ff090941574f9ef4c2479d96c323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144436 Malicious code in lint-duplex-bellatrix-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4663042e0b4372b3db047434410679341e3cff303841a5caf9c0c5924b813170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-nightwatch-electron-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f4dceed378716fcc9345a96d156b39cf00ed7d7f0067593d60376665be4ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...