MAL-2025-139538 Malicious code in aquarius-jwt-bulma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6563a0cc256be828325c533ef3b8a3fa946a92f767374fdfd71f591644edea79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142279 Malicious code in europa-lyra-aquarius-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6306362f7fdd29dade449c58d4fb87743c3fc83a79cfb181cc9c54bf93e4b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139562 Malicious code in aquarius-xanadu-zephyr-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2cedad061180675ee04280017b0fa390f96a0e919fa21dcb908376553ce93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144521 Malicious code in loglevel-telesto-pino-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5290f6af3b7764bf5e079fdebd8a5058e7da516a2a52311b06f53c03e46cd3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145739 Malicious code in oauth-zenith-pino-pretty-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88e0eb585e086945dfbf2008b4da72a58c538e8c2d3c8381af73c3b25181029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147773 Malicious code in sedna-leda-virgo-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678811bc3418cea8107e8a9fe3f77efb20d7b071be856ea9696257f6c00d563a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149126 Malicious code in venus-toml-google-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19275523c1ac90a3c78c796a3d6a693d61c37f1c6e132085aab050319a35dde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147677 Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e74a0f0b1190b28e62b75438426908b78b6776a7293dc127d4f7f037d74279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146612 Malicious code in procyon-quantum-ganymede-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184b056f5fa6c8493f7d18673a4bce96732448062b2c6cf87205a3b11cb6d948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147290 Malicious code in request-cordelia-cypress-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66fb1c730dec97f29ade6b1d6795405786d119efa2bdade8c8b96b568991474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145195 Malicious code in mui-betelgeuse-chariklo-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300f12d26957e00101409aa7e0c2cfb856fd8a82c85b7b2a264cd249f286106c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144564 Malicious code in loopback-server-grunt-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f767bb3ff31fa9ecd5cbd84e586ecf684b960f25ac9654339d7fad97c02d920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146691 Malicious code in protractor-oauth-izar-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d68bd7685f92c9fe05e749f9754a0cba699d978905e494f3045f2e5beb5c437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145143 Malicious code in mongodb-winston-jovian-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ccd23e9b09ce25258d0121da16e8571c37e336c93fd86210692a951a107288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143549 Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401c0c0ca553872fa48d5cbb6954f3314f7e977b5dd6ee50218468026d0d7581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149197 Malicious code in vuepress-pegasus-gravity-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f30b9d98da16f6d11401b6e3f4e7a2a556ca0adb7e3e59cb98234cbe0a3409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147280 Malicious code in repository-prompts-rate-limiter-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf377bb81f4927325b2351ce7a12400024c12876e52b462e3cd4f8643761011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-global-xo-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33e51dcfdaaa8f55216e23568724999df1302158fe3a4cb0a4325d02d21c5bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-geckodriver-radiant-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1216b3a1e626ab6c41d61657716dcfc1cd91b850838bf188bb8923d43e525c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-private-hermes-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb0a2cdc40332b1e6809abb656db6f05e153274162f9f92a6830d8a94e085bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...