MAL-2025-140821 Malicious code in cluster-callisto-ursa-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229943c5e9d79a2f0d941b9a02ebda9cab8fd22ad809ae3f4897beb3c6be0936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147314 Malicious code in request-sync-magellan-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79f1efc842b2ad8058b2585be7a3aa35dd20a9bd08e234c21471a77b6ad3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140641 Malicious code in chalk-gulp-helmet-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e819892ef4c38110723e1c2772e4b9b3e9b6d1168ce269f008df5ec18f81a7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140282 Malicious code in cache-procyon-markdown-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0a5ed9de61f271e486d7001316411a5cba9e130e1850a2cffc40653b79943e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-sagitta-meissa-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cca1b2ab5bd53cc85c6357354786a95521da387fc53eebf4744c794b0ae539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-browserify-playwright-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7488bf1c84cac1534c0f648411101f77dfe5e87d49fa0fd80d42b09b61442089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-octans-procyon-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974400de422e2a3fb0d03cf40d45a0476bca83b458b272e5638ed90165ed00e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139636 Malicious code in async-procyon-webdriver-manager-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82623baeedc62747604851f9eaed098914336c250e96eb832088f7207a106c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146300 Malicious code in pm2-helios-alphard-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbd0a5ef1720a24c70a5716ae1225fbfb47159986dcafe4406907eb91fcb371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-await-got-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40e789ccbb5f530142799e6b4432dd8fbdcb5229c1554268b72c421195642d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-mensa-test-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734533733cb93e6d7ba24767567df55e07992b9ccf15111dc99a7dd30db9cc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-webdriverio-chromedriver-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9261fa6b5e81737cb2fb47ace42efa2824f828b3c51aa7a92dc69a8f409c5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142969 Malicious code in google-sagitta-nodejs-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338abc925116d84e0ecc7c1b0f9dda422e67c5ad6a11245fb5ce6333b89b3a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139773 Malicious code in avior-leda-cordelia-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ebc3dafe421376c8a68b4f99a070c82d6b07785161a4d708ff483c04935e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138865 Malicious code in mean-peach-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f0eb8e7ff15d8e0b06a0bee607b728ac17fc1c07735ace0058a7f88a933806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-nasipecel86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5f8400011e7644c72a3ceb5c10869bc19f9f80856aff89d8cd0b0de14986d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-soto3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5d5992a3f7bb859af29194325ee8ccbaaba97844201fae9a86ff6ae4a35b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133640 Malicious code in galih-lepet93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6bce3ae0bc1ccc8fb7c93b8dc9db3c3bdb082cccdbc1971f22a452d64413e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133373 Malicious code in fajar-lapis8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32c90eb67c60dd1be3ee0e83b19fe88e94df32b3883da67c67daea8f23e444f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136708 Malicious code in rina-lapis23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71509075529efc3f3f006766c3bcb56c891b49507622094b078341adab33a56d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...