MAL-2025-141205 Malicious code in cosmos-cypress-registry-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184be61838d74995e813d28e8d20ce09f8082497818008ecacd08fd16637920b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142576 Malicious code in forever-tool-achernar-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35badbc2452fccf1a21d3096470faba189442105c382357f1f69ff66eb45921a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144143 Malicious code in kaus-firebase-jabbah-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83963e190ee16a0e46c3d5d97c4e3e65793b6f16cd4f7aba6809f48e59ffc509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140714 Malicious code in chariklo-spectron-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d78c278ecff4ebaff38abca456c02346ef98a651fbad21ad8f688104cf4822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144746 Malicious code in materialize-materialize-mini-css-extract-plugin-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd756c9249743cd040cd2ea865ff064a8e93249f95f6c5a86941b003c255727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148242 Malicious code in sqlite-transform-jest-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4edbfb4264847c384da631ea6bc0589e5e25634a72695e65abc456edddc215b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147634 Malicious code in sagitta-zephyr-prettier-stylelint-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e0bc5f74d9334238f6e4593bc4bbeae0f83fc66d8a18c2709882e19e7a5326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140686 Malicious code in changelog-stop-spectron-webdriver-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e35232b2768c3bb1baf79865a9e648987758ad19e7705710da8c61613fec77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146441 Malicious code in postgres-neptune-start-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e313b6f9d33429c95c9c1d346a82c5c092d01bd5405df768c5b3ce038bb232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142063 Malicious code in enif-sequelize-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdaf7d09db460ea49ef4af746993205b3c7f4df469d8757fa497731a2ed8676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139410 Malicious code in antares-got-nashira-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e05586c6b012e053902b0ba00d414e28fcd3163d35425086543ce4e5d9ed481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great-cyan-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79bead203127cff55897677ee27bc4b303765183b5983958974d3295bad368e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing-moccasin-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdc8cf54d1a0f4d631242c472458584cd3c8a458610f8062f1d9c0d2d221046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking-tan-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61c22239077633e5a19a69a5a14161c6d1ed6230bfdbefec065a2d46f2355b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139127 Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138905 Malicious code in obliged-ivory-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f362365f89f3750073cc6692175242c5f2d5c361a74f6fd8942b5560b6f963f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138678 Malicious code in eastern-bronze-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6305424298dc1af505d2e06c3436f83d47e73b4f623105f2821fc44243a3f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138651 Malicious code in delighted-ivory-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00e5c1f68d6d37f5b8fab0f107d7797627bd4c27009816cf3f7f5011c7a0882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-bakwan88-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1268498f1ae70cfe75f49d29259a48d994e066413be08ffb8384b086f6af3253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...