MAL-2025-149267 Malicious code in warp-dagda-antd-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264c22b5aaf174fd3e7207d8c30036247f754b17db2f75f89a85ca62322bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145833 Malicious code in ophiuchus-pavo-docusaurus-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a79c288080b8fddeb7066d7a272b440e104692bf11d0fb31de33667ee13c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139705 Malicious code in aurora-pino-pretty-meissa-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219c9ebd95a6895f7ae3b5bd30c7638974e7c6d271ad994f045c9ae4e3770967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142903 Malicious code in gemini-lyra-stop-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de05007ded0357f96c6580f461bd2d5f802efa82ccee17f4206e5a4433c0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145725 Malicious code in oauth-corvus-atlas-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea6397626f678ed2718693c793e7e8c9d14c88e40df83e6f5158ac589f021b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146287 Malicious code in playwright-stream-playwright-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b3fd81d19302da9d8cc7b33e3af97084a394baaaa387caa7dcc86a22a5b040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144720 Malicious code in markdownlint-antares-development-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159246d8d4207be330eef63c7841b4101f0e806190d6bc45b2344c63e20bfeb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142298 Malicious code in europa-vuepress-sass-loader-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc630cc3b9853a3e4a5ab5e6fa977d883baedf6edd8f9d7ea2803d49476a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142245 Malicious code in eslint-plugin-tool-rest-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0560020b42000a697a1c44e8f3e8ed4c0a9d8cd74d971fce648ff57bbe49f39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148829 Malicious code in triton-taurus-callisto-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc032180d0a076e255d77641301840aef565ca59487ea2c3a303c859bb6d74b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147893 Malicious code in server-despina-polaris-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc1fbb618bef532bd29da3f9d50b1f8124737494a734f5788fe1ae1d924b69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145679 Malicious code in npm-helios-nuxtjs-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d011b06489abe320d03829c7aeb72ebc9c37f4a034533c6bde985f438dae83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-testcafe-kinetic-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b35b09e0a0d18b36c54fbc73754302779000e4a4c2f94804e5e040b67669a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-init-slides-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5365fb7829cfd8ab509782ae75c027abe5acf1c7227250c2f9bce12c2c4d1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-husky-gacrux-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e3d4d871f4f969cba5282084ba6d4668843d298314b57516e622809c5616cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-run-script-draco-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7496f52ceb1b572a541bb3ce44c44f647500abd52b1015c97b8a6e7de1ea336c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-hermes-javascript-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3145239131249d38911912839b909da09543c4d79debd3368f5ea461512c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-rehype-promise-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20a079e163dc4dff6bf1a7f99b497723fecc9c4a0f47079f4042c121d0e92a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-cross-env-miranda-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70f7421c90393fb635169f739746d14f59bb6253fc140493f6103980b4d869a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-jupiter-bellatrix-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463b4aa78ed38b448c61f33a100a1d5b292882f7610f939120e76e54d75b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...