MAL-2025-148596 Malicious code in testcafe-hyperion-envconfig-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75325a6cd17ff0185c982e5269ab753bfab2e7cc19234fbc8456515a4ecc2381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139832 Malicious code in axios-karma-mensa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410722a9393688cd5d9c27ae34b34821e0521572820fd9dba34e1116e0e430f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148461 Malicious code in taurus-await-ophiuchus-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325598ed2d9b61f47852d3de88123386713e9c67d86f0f3ebaf6f8ff11aff1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142802 Malicious code in ganymede-hugo-phoebe-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd80c359670756604b123ce061016e43ada44c4484b1a074625aef1412f9bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148499 Malicious code in telesto-quito-halley-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e627f3f10e73632abb1040fef38bfe444561fc70410833337e38e8496d0e2baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140366 Malicious code in canopus-nova-dotenv-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394ee31a86cb9f498b7f9ad32a3105ce4c906477999c9677d623111b27a5bfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149434 Malicious code in weywot-centauri-betelgeuse-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafe0b1da72ba80dc7b25c64c276cb0cf185fbaa03daba66d25a86ae356dd578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148676 Malicious code in titan-cluster-yakutsk-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab45250d9d40c0388aebade6b47a021c64a31a23329c3bc89a86aa9242321f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139968 Malicious code in betelgeuse-betelgeuse-carpo-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9255a7aef8d17bfbb639e1ed68efc3bb23a1a2f2b680f8f22ad8b517075a3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139756 Malicious code in auth0-sagitta-koa-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d93c83ef09b706f1e0c5bb0ea44c3961eb7c8d59ba7634621209328d95356a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143151 Malicious code in halley-jupiter-norma-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fcdcc66191a0b741cc743c102587a04433fdd67757aad07d5321a0f3eac3af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143914 Malicious code in jekyll-selenium-prettier-plugin-markdown-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b026af46ec86f7d28b42b47be89d21c6c70732acb979773420fbb4796ad3a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149395 Malicious code in webpack-dotenv-upgrade-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4774c14c5941a4916f942059840163dc3766f319a05cd42f18f3b96ca5beb4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142523 Malicious code in flare-commitizen-graphql-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edafc44dd5f36d5fa54bf30d998c963dac42355a9ca104a929a926e16a49d7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-await-cosmiconfig-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153d9c78b1503d4d82f8378f93edab2df4d30b9f1128f3bb265df2952e37843b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142911 Malicious code in gemini-postcss-loader-quantum-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025ab4f53ac3540ff0cd2eb7fbe2d4c11d635f63020d4195a445991a4c7d4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143374 Malicious code in html-webpack-plugin-transform-google-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144097 Malicious code in karma-cordelia-private-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabfd11c59e2f3ae98ce11ae4f0b511e6e6e016987d8dd0740070fc439c04b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140381 Malicious code in capella-changelog-cressida-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9e9e3261268abc9d9f358e046c33a68cbf459c83bb26bf4bde323534143ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143549 Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401c0c0ca553872fa48d5cbb6954f3314f7e977b5dd6ee50218468026d0d7581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...