MAL-2025-141778 Malicious code in dotenv-safe-transport-aether-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a2f70e0ee9bfe40be60ec7cbc6f4db34b9d2c5881db0bcc8092bb165bfbfdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142171 Malicious code in eris-eslint-plugin-slidev-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0320e0d702a39f689225390ed9c2d557b760f8f092af53cc00dbb747f1c95c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145883 Malicious code in ora-europa-tool-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e006f42e194527ca2cc8573e612feb59b34bb39906c9d9544474f1576887f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140962 Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146499 Malicious code in prettier-plugin-markdown-xml-ursa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bc7b7aecb7e4c96ec7cac92f48ff77c3255685377d2d2afc077e1a4505538a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141831 Malicious code in dynamo-nodemon-bulma-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bcdbdeb2b193f13228505dc1bd26683ae0fa84814258d565bd822beae73fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143830 Malicious code in janus-rocket-helmet-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf25cb6683a7b566d5fac63c10dcddb44280307cb73219f67c7a9d006ff0d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147096 Malicious code in redis-atlas-docusaurus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc6739e1d77dd79766a095815817023e3d3a697933689bbea3e6ae70e215443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149333 Malicious code in webdriver-manager-scorpius-ganymede-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5285e61f586138fc557d3e0929f99231cfa05eaf4a8ae41d7769f30ebd2e99ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141706 Malicious code in dotenv-docusaurus-telesto-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89751071ba446007244038c24eea5172d39c9745d04148d57bfdb9056109679a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148391 Malicious code in supervisor-corvus-css-loader-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e717c0a7c2be48cd214be01d42a303508b2d0dbdda6904c59955d4168e4f36a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143841 Malicious code in janus-wezen-firebase-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce52a5e7deacd99a94aed248457563529af50decd47d736ec8e125d092e3b959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143891 Malicious code in javascript-stop-solis-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604e6dfd483497d82c03b53aa28709fb0bd1b3c4692e4a3b5af4259d9b7041b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146505 Malicious code in prettier-stop-query-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333c2e6a26a046e467d6256e8183f02eab4cd2f94d15be31633cbf99abc6db9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147997 Malicious code in slides-supervisor-apollo-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1595e06feea81377f062048d00a5c9f0a522ec6bd4fd8422ee3423902b77b5b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140855 Malicious code in colors-neptune-dotenv-parse-variables-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5537dac183ddea56fe80ce29f10e2395b13fd7e9a0c8af926ed0e4c2a5b4a9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139288 Malicious code in algol-achernar-spectron-webdriver-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bdfcb26dc0908515856f1c27702b0c0d93665097677e7a0dd3a896aa1d6483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140305 Malicious code in callback-private-hermes-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb0a2cdc40332b1e6809abb656db6f05e153274162f9f92a6830d8a94e085bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142659 Malicious code in fornax-uninstall-epimetheus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d813f7d77d1e40e349270d27bb8fd5e7bfd218b0b61439723e65f93a8cba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148361 Malicious code in subscription-levels-halley-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1322a4601d3aa4de9ab3d431b5c3612263a5b4d7a1e35653bba6d38cd2a8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...