MAL-2025-141631 Malicious code in development-sedna-webdriver-mocha-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edcd3a5638cb84734581316b37ddfc7bb43dfa6c1eb41b1e5f4a1d0cf3402f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144167 Malicious code in kinetic-delphinus-farout-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f370a395c2d47ea909b67d7db2433dbcdc997442f2a384b050ea0c2e241a773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145292 Malicious code in native-phoenix-antares-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956a174c13c0490bf7e9a7ef5873ebdf96a8566deabda32f029f8357f56acc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146043 Malicious code in pegasus-morgan-polaris-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ca8a23e8d2cec9a4cf37fc974af0d4e84bfc6df5c1adc870b4fda3cc145cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142118 Malicious code in equinox-child-process-deneb-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fbe7ad61e9974fe7ed3d9c4b62c0e379c9a6f7dda87e121fc18ddfeb5770acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147778 Malicious code in sedna-nightmare-global-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea5f9d9f5413f180107a6de4e14c1bf8cfb6eb40e53c220812579cb7b81df7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145085 Malicious code in mocha-less-loader-axios-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bba08a828bd8ae434fdbe2f07303a911d202385632eb1fa95adf5361f03147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146044 Malicious code in pegasus-nuxtjs-nightwatch-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc38e25ae939a2a042c8cf5c3865a6e8479f2d74f275f30ffd53c4bdbedcb729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147376 Malicious code in restart-convict-juno-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd09aa128504dfe01d7d06581a8d6530ecd19d02baa8186a06612eaee198b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149126 Malicious code in venus-toml-google-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19275523c1ac90a3c78c796a3d6a693d61c37f1c6e132085aab050319a35dde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141556 Malicious code in deneb-regulus-fork-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c6bd79fffbe62f81884637a6ed985b2a9026e1237ee0222ae438709e8275e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149756 Malicious code in xo-reveal-md-halley-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4ffe68d4da6b27060a10d7befaea1c304a6a918f1fdb9553e6672a68bad986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141519 Malicious code in delphinus-io-aldebaran-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d821ef98f08a1c0be384e1163096d7db814e10ae4f42e0e576ae0d3a45c7e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147240 Malicious code in release-it-xo-quantum-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d834144b9f5a485169ba45b2774efb272a68b9dfe0a1f0819dca1d0bf3eb872d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139192 Malicious code in achernar-cassini-antares-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c926c6238992b2efa80955805e330ca4559e9c8936091d46b8f110c4539464f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141805 Malicious code in duplex-config-capella-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02bc3281086614c8cd6b45aa58e9e18acba38bf7938917b5b04ec3f943b11f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146572 Malicious code in process-standard-miranda-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b93c77a3e3cdc4374f5677c15a17663511b67e64556c662fec4d3a4bd29ec3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144253 Malicious code in lacerta-vulcan-lacerta-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70754d37b6fe15e7022a1dd964703e0c84c878a507e041c3d5b1eb0bb87a1bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143159 Malicious code in halley-phoenix-io-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731fa23aff766760f0a59030baa0ab809c1d44a802dee5f4ec14814ab781d4ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145625 Malicious code in non-blocking-style-loader-grus-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6981d21e3d65c60637859fde1c38681db6c5965ee98576c668ade20b35449bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...