MAL-2025-146315 Malicious code in pm2-wezen-jest-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b4c758bdd6994f9f7ec62f125b619a3dc6ba4f6b7a8534103d898a9ef24211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149404 Malicious code in webpack-prettier-stylelint-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64921929eec39375b7dbf92fa014626fad9648c6b0c294de247a2fb6e2fc88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142747 Malicious code in fusion-rollup-plugin-hexo-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c092b78544bb01f07823044707226632ad2b69882e54cca8f1837ec105bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142516 Malicious code in firebase-tailwindcss-pegasus-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c42e3fd037db8f4b91d3aaefec30fd2fbad79523ac2b95a4aaef0bf75c2eb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149056 Malicious code in ursa-express-buffer-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80a167979bbebdf1747a6f8b1c3dd693c488a57b5fb438a0218ac2c54d051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146577 Malicious code in procyon-atlas-jest-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5f147fde98a922274e900cd54befd2b404f5b5c90d849347db757a294df9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145648 Malicious code in norma-registry-async-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13eb62efdc128819d4e6c73446ceb745d539c8ef9c8e3debdd1972bf6210cd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143335 Malicious code in hermes-zenobia-wasat-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629222bdaf4ec08843dda82aa3183c588deb4300ec12bf7106646d487cd874b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146940 Malicious code in quark-webdriver-manager-redis-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccc34e11643b49b20a0bdd549cde8b4cf8cb10a4b5ad0004b74e58f61638afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-xenos-spica-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0918ab27f9677fa071f80bd9e201bc29d7d84c5086b06e1819e9ef05c5c31882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-yonder-module-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8a88d8d6c9de0dc9811395ffc27c01a2b4ffde660a8f412ebbeaa8db6930e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140107 Malicious code in bootstrap-hugo-altair-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beac14029dddc28c5b4bbe056a0cbef77f3507b7b61076db87a723febc37e8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141215 Malicious code in cosmos-proxima-luna-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faad48fe24aff5b595f76158df0c58875bb03b30f753cef677da3adff72fc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141570 Malicious code in dependencies-install-xenon-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175cd2eca6ada3157adf3a6480fd5aaae846d63b51c649e4c9b450878d26785e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146679 Malicious code in protractor-ceres-pipe-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1f5d475d87b9be1e9b5b9319d5a267f7c1d579104ea2bbd5c75147f6239988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141081 Malicious code in convict-pavo-kaus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dedd338de94ab3aca08a7d7afb89baa6958507406e3a7ae194da178bea1971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144983 Malicious code in mini-css-extract-plugin-npm-lint-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955c1cbb9e53ec6a4590e00dadbf57602004d2e8a29573af63c9175795bf5bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145553 Malicious code in node-sass-run-script-chariklo-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5944bf5c3be07d2e392061379523f658d10a122853c5d85cfc015a5a2ee4bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141559 Malicious code in deneb-testcafe-dotenv-safe-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a6f8049199b598ac6a94328e799d71ab971e6ac6641d4f180daf58200cba22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144054 Malicious code in jupiter-europa-test-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e37cc939f7b9dd9e11d6abaf23051989e7581681ed85c1f58e2ad2e96a039d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...