MAL-2025-149271 Malicious code in warp-kastra-upgrade-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5fc845cd12256e7a513ddb060ed7d94cd1018470e15f449b1637638276e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141218 Malicious code in cosmos-rest-commitlint-config-angular-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5f62624d7af56b3ad9391610058a9c8347af8babae64bee75e0cb6963cf960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142472 Malicious code in figures-lacerta-ceres-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf441778c71088799e3df4f5fcc29bae87a6efe489abca752befa1db4e635cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145255 Malicious code in mysql-mongodb-non-blocking-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc4ac2d3328c3740aa19ee05d8399c17e433d438b2eecf42c685b9fbfdc2ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140458 Malicious code in cassini-barnard-postcss-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fc0eae501a3f44188f97c182da0c64a77f5f9ad59719e31d2d186c2364e9aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139925 Malicious code in bellatrix-async-yildun-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf94953e1f164d925137c34e16b94d8edaa0cd00ff42194777b4f06ac661267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146685 Malicious code in protractor-event-meteor-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b5466457e913232044e97ffd8f47292ac4c038ca9675f86cf57212134a556e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144102 Malicious code in karma-dependencies-geckodriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801176c7498c86258fc33864d1d1a0405d7ba7062ec8bb2514017ee4e04b7f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143849 Malicious code in jasmine-dione-antares-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8eb24375a86ddb152593c2601b25c78fb8d04c3eb3a1ff03cf84d53233ccbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144252 Malicious code in lacerta-ursa-process-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108481acf0733a6dcfa4494b50cff9fd397842b2c03148422adf1b8d22d76315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145330 Malicious code in nconf-thuban-centaurus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deee308073cd092d17a74292e5cebc2292e92286732c43f143f213de23e65479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144317 Malicious code in less-loader-cross-env-nebula-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f025b35fb83b50288be5f6c7f07f992e963b337094085def0b5a13b58ea2631f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142075 Malicious code in envconfig-ini-zephyr-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605fe81490d64b2c1a772699d84c2999f71b970b02bba2e93361a77189f5dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145005 Malicious code in mira-convict-element-ui-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2a6d456fbc4d3913a24553e903f83cb7fd4e63c4e3f8e5a5860b913c4a9b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148898 Malicious code in ultra-hyperion-cors-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f6d76b440b2cbee8813794a38ff75d10766939a035c4cbaa6f13a024b13c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149315 Malicious code in webdriver-manager-duplex-aurora-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36848b35d616f79fcb5324f3b0b1d2fb3f0da158356244e6dd952a339c5e9e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149515 Malicious code in winston-nightwatch-sagitta-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da665bbaad7488248480eb32e269a4365ff5d2185af8c41490d02639d46dc5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149333 Malicious code in webdriver-manager-scorpius-ganymede-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5285e61f586138fc557d3e0929f99231cfa05eaf4a8ae41d7769f30ebd2e99ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141451 Malicious code in dactyl-proxima-xenos-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd98d2a90da565834b252f27ed28923a8f160728c2a20f669acc1d5c4eff4edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141349 Malicious code in csv-neptune-fetch-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb24c5d3b535a0b5cce2ce3b89a0d36c4c30e0fdd5322f5b0ca38d84d577bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...