MAL-2025-143721 Malicious code in iota-dotenv-safe-webdriver-mocha-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d7e968a0295c0187fef5d43373097ab9585a396b4ff347bbfdd5347a05b365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140556 Malicious code in centaurus-venus-ophiuchus-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a7fca40fd1d962d444ebe84a26902a310952fe7cd3247d27a4f0122c3c018b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148619 Malicious code in tethys-ganymede-despina-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8890cc6c1247e170c0d72077ac4ec63516a0239c307bf183ca446423abf47f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142004 Malicious code in eleventy-mdx-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f74c97d401a134f9b646a3669fbb031a73c2e27575285bfc7e10c686d79f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140597 Malicious code in chai-luna-sagitta-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d3255a82c5c62dbbb9e1dd96ea178fc57f21d2fd80e8dd64ebf605eda0f22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141445 Malicious code in dactyl-lacerta-inquirer-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9d44e49e7d4cfce348e41e8498b60b82a2e01d36491381451cc7dcb3feaea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149771 Malicious code in yakutsk-init-neptune-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a512de47dacac8b7e10ad032e5bdb245b16bd64d64ebf701bbd3adf8efbc71c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142868 Malicious code in geckodriver-jabbah-ignite-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4507051c332a729b6cc8aa5e646269609ee1d1a86c0e98c10de96f5fb7770530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140854 Malicious code in colors-magellan-commitlint-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1414f3f7790df277a34016899723c17f455ffcd12131449225c8c1dcbb98493f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149779 Malicious code in yakutsk-resolvers-phoebe-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f5fdc72d93b4fd8896a336557775e4a55ac8cfcce0a6c6bb257314f79673ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145339 Malicious code in nebula-dactyl-meissa-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fadf6c26d618a6dc56352d25d762925947927db5f5ea0134c63e3dbdf0bb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146298 Malicious code in pm2-grus-castor-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b01596d797dab056c781ca726c1f03fc07bec0ea69821410f74259d0a63bcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145541 Malicious code in node-sass-geckodriver-colors-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b1ee4a9c3a715364f26c25e7eb1c0eaff93c630929b0eb42fffe4956558882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141570 Malicious code in dependencies-install-xenon-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175cd2eca6ada3157adf3a6480fd5aaae846d63b51c649e4c9b450878d26785e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139208 Malicious code in adonis-astro-phoenix-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7e99fb4afc14e990840dc9e2341543154aa3e7af41df224312dc7a2bbf330e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-nebula-rollup-plugin-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27d54fb6425d7716f20259ac15707ab8354e139d9a713e31dd0d222e2275140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-init-cosmiconfig-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f04d7568c3f028f9202f6fd6833b9c5817f3896fd5ac1dce658b94d355841a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-sirius-ultra-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1615c16c9e22f037204875a7e2ea2e865b2b9ab7582cf0c51d171127d3b7a370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-rocket-helmet-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf25cb6683a7b566d5fac63c10dcddb44280307cb73219f67c7a9d006ff0d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-bulma-mocha-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4d1d54b8f25c3f3912f8fe0efdaa4779ce0fd2a782786d350f986a550ed31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...