MAL-2025-149443 Malicious code in weywot-nightwatch-parcel-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf715bf25efa7cc4338bbd3849ea8c9c5f15eb3cd6d1efa2dab6d489b92b72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149581 Malicious code in writable-supervisor-zenobia-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50daf5591e2972fde227a78418365d4f057660287ba31db763855088858763ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142754 Malicious code in gacrux-capella-nconf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dee520074e43f20c631e67eb9acfd0c743d02d0f0683e038630ae40bdb9b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147913 Malicious code in shelljs-farout-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d33e3ffe2787112ac2001ee15ede2dc2229ab29e8c9e967d06ea9ab158c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143768 Malicious code in jabbah-aether-heka-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be60625e4315cdb6c9c73d8ac61b43d26e1c358e30d28b381c9ce97b78e7a6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139537 Malicious code in aquarius-hermes-indus-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcfeacb65f8e0f5baba5b352b01cad8d2ac7891eb85b46fda4f3388be39fffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144359 Malicious code in levels-oberon-install-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98c11b8e2be55ebd3072519b7f90b1d535d45c258b4361e0edd5ca4394d288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142001 Malicious code in eleventy-kaus-cz-conventional-changelog-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04bc3d838e3b526c2689e5089a00ca9f5609170841e9b60177b38e98d61ab92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142732 Malicious code in fusion-flare-mensa-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cb283c5e1df3af407d2bf58256597fec083f923747006d84c54fb6f2b16d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148692 Malicious code in titan-quantum-unuk-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2442a3f0060056ceb4fb323c6c2eba78b7c4abb16e5826b0c5a13a0f9bd413da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139950 Malicious code in bellatrix-pino-nebula-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809b5630c0cfeeb0cfc70f1147f91f5cd46f8af4c6bd74bd28cb99c84a0d488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149549 Malicious code in wolf-got-corvus-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e498c81e00b302004959da9d5dfafb435ea456e7f6d839489ef09f645ffba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145048 Malicious code in miranda-polaris-async-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a748209c7aa7060922770cdc1d8e677c33cc71c950de648772f153dfaae979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141714 Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7e71c5fd5f6be469b7a62763ba0819de2f1561d0a7ac0b37fb5018accac39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139722 Malicious code in auth-europa-json-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649df122b61a0fefdc081c4cf8993203d642edd844cd95389b1a9160d88043ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144064 Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145475 Malicious code in nightwatch-node-config-node-config-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c474c424b69fafd765d12e27755c0381c66b0f348f254abc2bd4a1dc5aa1273c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143811 Malicious code in janus-gravity-npm-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb588742ab06ea36ce34b3af12e873ced45d6cb1c8efed846255ae9d75663b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143283 Malicious code in hercules-forever-commitlint-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9803406d1325535701e09d7d4d218c17a8cd1c1e737f8f79ae74503e89943b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140902 Malicious code in command-fetch-sagitta-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886152bb1e80cce3c0d2c55fd7465b1020c44e96c881ac2cf8721beb2ae0b97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...