MAL-2025-146376 Malicious code in polaris-weywot-ganymede-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170d3e04ad289a69b3ceb68f5917088fd708a09b8b96f4ab8261e3123b32e2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149315 Malicious code in webdriver-manager-duplex-aurora-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36848b35d616f79fcb5324f3b0b1d2fb3f0da158356244e6dd952a339c5e9e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149386 Malicious code in webdriverio-terser-webpack-plugin-optimize-css-assets-webpack-plugin-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691578a3e3f39189b4005a3515a70fa7106475aa007895da92a8cc0a0ccba662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142373 Malicious code in express-electron-builder-eslint-plugin-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7456305cc58ebdceba37e7f3ac074cb977be82975180ce9e478f8c7d20a17f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143642 Malicious code in inquirer-cli-hermes-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e24b115a829d16b3956d1bc125c8001900849f9d2adfba59701f7f3a09299ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148735 Malicious code in tool-hercules-jwt-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614867d448239773695e3967c5731da29146f4ef3973888628f479856cd8eb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140681 Malicious code in changelog-rollup-proxima-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbce01fe12dee0ad06db12fcd44184e7a2fa4e4ae51be17a138168babedebe9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141858 Malicious code in eclipse-pm2-middleware-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a827d03584958286b872f476566e28d5109d4f9b6c36b5b27c391bc961ff95b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142181 Malicious code in eris-public-metalsmith-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cee348a9b3e9c807a98d182a4eb2314c88e555a006cddbd40e0be915a84a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145501 Malicious code in node-config-antares-wasat-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17793dd4545a736114649086e593003aa80ac3a044ccfcefbf148d2d89f9a323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140458 Malicious code in cassini-barnard-postcss-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fc0eae501a3f44188f97c182da0c64a77f5f9ad59719e31d2d186c2364e9aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146326 Malicious code in polaris-betelgeuse-html-webpack-plugin-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d019ca346c566d05986b11fd678198d3a7f42e5ef2de48fd52d62dc516a8c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143206 Malicious code in heka-jsonp-triton-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4442839a576bde6f5711839aebc86fbf239039a98fb50a343307fadc3dcc0e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144834 Malicious code in meissa-slides-event-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ea016128f3a3773671f5032bda5869a87bfa65d6609d9ef5f19160d22298b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148409 Malicious code in supervisor-zenith-ganymede-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a90b156b9a8819e787140ca064ef027ec6699605edd77ecf43ee17d3936bcf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142705 Malicious code in frontend-jekyll-commitizen-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e3259b503d88674f19a0c0a8474a3cf39ac6c21ea4606c82ba85b144e55d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146388 Malicious code in postcss-google-prompts-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e3cebc126d02237fd746fc3461146e32650856c04c1abdad20a0015402fb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148820 Malicious code in triton-mira-regulus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b1011fe9a27cb0c75ca7c8104767156628e1213a93bbbc953d3b2d7b7214a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147729 Malicious code in scripts-equinox-achernar-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75261065f0a6b02ca3e374fc44540af758f88fa9649ec332f7b2c9b4b226f83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146379 Malicious code in postcss-atlas-graphql-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e1e09c839e7a8dd1bf2271918dfd6f0dffef915db2fca18e17edd957e22026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...