MAL-2025-143704 Malicious code in io-pino-pretty-start-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7227feb91a808715799e857158fe7571b0a692dc72fd0f919c3b346390daddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143613 Malicious code in init-antares-deneb-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf06fd9688c77aeaeb15ff5608ce4a1fee14ee26aa826fd990a8f62ba09ced6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142379 Malicious code in express-ini-soap-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49eae2ca0c7684bc542e8a3126f14f9e1a4ab907103a7c6013ca9cd73841ec41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147634 Malicious code in sagitta-zephyr-prettier-stylelint-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e0bc5f74d9334238f6e4593bc4bbeae0f83fc66d8a18c2709882e19e7a5326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148639 Malicious code in thuban-acamar-geckodriver-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2efe942c0be1e5d266bb42a397eec4438ab5d17f13940591bdfcc69cc152a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144643 Malicious code in magellan-karma-barnard-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e688dc4b727f9d3b19915afd16b27657a3e39c2f63118c5d13e778f5826283d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139521 Malicious code in apollo-nightwatch-iota-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e337b3a1b57878bbc71d811c9092058ec1eeab9deff318459ddf6abb92cef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145899 Malicious code in ora-webdriver-mocha-koa-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264d6148006e14acb388e5a9fa325a0f504bdb13ba6730af51dfd4004aabd832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143731 Malicious code in iota-jupiter-bellatrix-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463b4aa78ed38b448c61f33a100a1d5b292882f7610f939120e76e54d75b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142576 Malicious code in forever-tool-achernar-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35badbc2452fccf1a21d3096470faba189442105c382357f1f69ff66eb45921a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149599 Malicious code in xanadu-leda-bunyan-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8daad87c85d73df4e50cbf5ae6d7f071b1e0e00f8dcff8e225e8dd160c157a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145871 Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe659625c683b2bac25ff371c17bb6016e2c47fc03dd89440b7daea743e24bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-elara-eclipse-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048347085c1a35d570cef25eada38c7e80fdabf3e21687fae65165bcf3933e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-hyperion-nova-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a26aa108c03ab09f42e137ce63034d09c9d1028ffd7e9bc25d0d6bf4adad17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-zenobia-promise-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2597941e827037dc95c37d6ce60f562a41e408f869d847205cfe66fc276023d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-npm-farout-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1ada7f740daf4ec82a6105cd6b46ced4f8385c45a41d911c90df80cba58d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-rehype-writable-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa3c685d0bd0edf1a3cd5b9568d2d94ca38c3a9e71d7542e1b5e0808955f95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-transport-node-config-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9423feda132f6fc399753b25257e55a7b21305d3123c15d455b262af1712ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-lint-orbit-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38cdb45ce2c006f7a290eeaa9ebd89179a65844456fe247adb34b597f3473af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-achernar-fork-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b8f8c34cd0569e980d0406ca537a6f31f0966e068ac568d2797b35fc517fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...