MAL-2025-145687 Malicious code in npm-package-octans-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0eb561cd5abc7f81e4ba2d12ca22ab8d7fdcf3401a02981a73418282539144f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144875 Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139564 Malicious code in arcturus-ariel-install-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a80cf0a64a22f38a82d52ff34e6e0d8162043c7109b0ced96ece487449a15f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141271 Malicious code in cross-env-scorpius-octans-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4011eaa486cbc130107b6c5b0293b7b15c8a0a58eb271ce30dfad67d434e3ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149855 Malicious code in zenith-mutation-enif-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212e28b1fde526e80106961c1bd090110c3ea00225817c67a83323d30157c811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143434 Malicious code in hydra-bellatrix-backend-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ab935a68be6a70f7ba6e91ca1a630274d8ffea77cffed2afddc09aacf072dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149047 Malicious code in ursa-centaurus-writable-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5379b0a5275af4c479fedd6a9b9d34b4460d265c5d39964e6c6902a534b3b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148979 Malicious code in unuk-despina-webdriver-manager-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e0a13df6ef506e64e146b74c4eb6c52626f109f7794a3ddc8150e695338c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140421 Malicious code in carina-postcss-auriga-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f7eb49ca9a8f5960086bc7093a2e8660219468302235c18df46dce850a980e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141209 Malicious code in cosmos-metalsmith-lint-staged-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e47d9bb19bf1f40f361150bbbf6dac55e25b74451e6e9a059068e2409af1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140871 Malicious code in comet-config-pyxis-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33044e97e3977cc09085f4cd26c4dd79e15812db77ae419ce12855b010a0d7c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146921 Malicious code in quark-child-process-mongodb-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0521d8f1c77a106749e2b261ebae8d051bf9972ef5fdf1cef5a35bda7c0dae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146802 Malicious code in publish-polaris-elara-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abdea6094641037be621c9137f473e7b3908465c09c068414a20cca34120727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147532 Malicious code in rollup-proxima-semantic-ui-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653895f8925b05c1c5a5f3796d814966f8c2eee89351d88d6f07bf2bcdbdb890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148662 Malicious code in thuban-rate-limiter-inquirer-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31db4ff3a14a6cfc7a3385757c75aa9019610cf3589b4e1d54ca754181bef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147768 Malicious code in sedna-hugo-webdriver-manager-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2830d155cc9eaca20b67d22d37ccb375f000c8fb86ce6a871a47af6795a59de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148428 Malicious code in sync-perseus-airbnb-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e798a293f82fa6711ebe5fd6e4175f927ff267443149f31e6ad259235274623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145914 Malicious code in orbit-transport-pulsar-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0ac9a87883bd4a5728f0a6a2441250aab1ea05641e171ea404f77c2d8eb39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140679 Malicious code in changelog-protractor-bunyan-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8d924d423f039c7a3fe6145082b38e7501a3ff931d7a0e79bce1d9b18c274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139633 Malicious code in async-package-spinner-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67481eaff1ab609487e64181fec0c051ced741075c652753d934342f610f9fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...