MAL-2025-144936 Malicious code in meteor-shelljs-miranda-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6546914dd8fe611917e0f0472d9be7368d424b3c5e5960f338667205faeeeb1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144195 Malicious code in koa-kaus-sirius-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5da38434c856097646612b2314c16d72307a75149247333f78b7090326adf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140203 Malicious code in bulma-aquarius-nestjs-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 636e9e92806fa50b6cc23210d705eb9f81250588b5856b4937405ab5baaada68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146841 Malicious code in pulsar-quito-standard-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac7c67bdb9d75c8e52475a01bcf3c355fc48b9d404756db73080de59a1c46ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144843 Malicious code in mensa-chakra-ui-acamar-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9804ce70db2a76211a21007dfe8f7a24a50604bb846a42933064d96c23ada4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149496 Malicious code in winston-gulp-test-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6f63b35e35336a3a9fdd43cb982b8e17fbfbb1cc799341655eb1ea37467d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139705 Malicious code in aurora-pino-pretty-meissa-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219c9ebd95a6895f7ae3b5bd30c7638974e7c6d271ad994f045c9ae4e3770967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148471 Malicious code in taurus-lint-andromeda-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22aede6c54725dc663745ea8702cae95b5545630e7dc96af364471615c2b017c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147560 Malicious code in sadr-envconfig-auth0-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f7faf91afa0b899372f0025c962cd94361782828e6bb8cefd809cd004e8713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147893 Malicious code in server-despina-polaris-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc1fbb618bef532bd29da3f9d50b1f8124737494a734f5788fe1ae1d924b69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142861 Malicious code in geckodriver-chromedriver-gridsome-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8871ef4db86c7b2c8ce589d292485e4ca71ce731a3e3f9928d59a1985727379d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139390 Malicious code in antares-antares-run-script-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20f91c50d5c34e888bb44213261f3dfc17384d14ce489e54ec198175b3da50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145030 Malicious code in miranda-elektra-epimetheus-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bc92613c692f422e1eeb84e62b6d937606f05483376161f03de703a402e984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149415 Malicious code in webpack-zenith-winston-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd50777e50a532469b958bf7a7553fe06e2abc0b0bbef40eda0e4ba56e523080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144712 Malicious code in markdown-pdf-xerxes-janus-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2927d2275f3a1cc3ef9706981e9632a656fe4473fd8fcd6c14ec07464710180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149842 Malicious code in yonder-request-apex-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 767ed0db79bed5b2206d9ebcdfd2080bf31ac5b6308a7100b29e891f3adb1090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142903 Malicious code in gemini-lyra-stop-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de05007ded0357f96c6580f461bd2d5f802efa82ccee17f4206e5a4433c0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ea2f6816e8ac0752b9542acd7bfb79935cb0249373cf5dc504196b617c0c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139139 Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138920 Malicious code in outside-blue-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b5cfef16a3260d810859a9327543f1696cf03d1066d3ee3749faae5c892d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...