MAL-2025-148814 Malicious code in triton-duplex-jsonp-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce8f1f8bdfbe0eb7305e787e364b8d48060c5e8fd599c5b5eb38830676c7fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141627 Malicious code in development-polaris-lint-staged-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2c638e326aa053f682240e547e9f90a7b769046b2d21739ef3ca2efad26ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149564 Malicious code in wolf-slides-nightwatch-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6fa277ac69bd9089da09771fd17d8924184412af68db60a37dd1a2614aa09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143325 Malicious code in hermes-request-antares-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5735598cc672f8656c24783449a33a750bb3c27163408675778eaa624319e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142799 Malicious code in ganymede-epimetheus-terser-webpack-plugin-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d3c3743af2962a1cc129f96e63d2dfb37e17bc2c226e24a59dcef2c0887915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141404 Malicious code in cypress-quark-celeste-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea4334579260db551945a868a011ad61151a559d906846ade5299adf7561ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144992 Malicious code in mini-css-extract-plugin-redis-tool-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c76cbb410313e8695796c355998093a7f80575a0ef4bd8350a10b4794b4192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141444 Malicious code in dactyl-inquirer-version-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8252b1269cc558b534e0319a0675c490082867e8a797591156fe834d3f1d7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147985 Malicious code in slides-geckodriver-sass-loader-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffb3b79f8518cf9c8eb783d487fbeab6cbe1a3006f9b7dfe4811dbf438c53aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147073 Malicious code in react-bootstrap-rocket-async-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6eed4998bf00e59d674933b76fbf9a1a5c4a158d6c5f0892cc4c658ac9d96f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-thuban-fetch-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16dcc1454be9da2756ec3d35e4405d9e17e0675409d2436b51ef91fb8b63e53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-airbnb-pulsar-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7bbc9a54197108d5227e17926f1c7b477b3b3c8dfe3b222333e539cd29d282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-leda-spica-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8c232432fbdab84a648397e08386e458588158d436a4b245573c2dc910e9c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-chromedriver-tool-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 990e83ab00588f55cbbc327d5e58b05e80f4e8faa1ec96c2ed563f5a1f8cef50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-cors-vuetify-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489811e779c7cd64f6303eb95d751c360fc9c8e8cf5ae73a590f8d2d0cd773a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-xenon-docusaurus-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18e6ac6c775039d3c19b111ee39a4af9bcc6553cab555cb4dc856a71bf73970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-prettier-stylelint-centaurus-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2b3af4f75fa5fb6640299c10d355b8a8184131a97251ab5b51ba36f1474cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-concurrently-fomalhaut-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f42ebaa574e7ee90b1b6d3611a83350c54b9886394a7d37a7ad315af7a0d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-corvus-socketio-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b118c859ce159a51547289bf829d5e6adb46f1e598638f8044f7c778c3486b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-electron-private-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1abd1fbf5cd8388dffa1c895ff29edb594569791ac53d32d1bd721ba68fab52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...