MAL-2025-139366 Malicious code in altair-scripts-dagda-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3a83b3d29fadebfc93ee31ec22b2fba479781dbec590684f1877f0b2d8f572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141210 Malicious code in cosmos-mutation-eslint-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ba4c4ab2fc046a741a48a61fd16f22d5f146a6b58e777157f13f0a8aad1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140072 Malicious code in bootes-browserify-browserify-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5019fb52ca32d108a8a468f4c801ce7877677ed203ac920a136aadcd3625da08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143276 Malicious code in hercules-commitlint-config-angular-neptune-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b24064082095441958e9cb412eefb08dce7f9be0b9c7c34e364b44f41348f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140537 Malicious code in centauri-selenium-cordelia-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5140bc05ac5e03f10bf4b67fcf844a7fa3bf3d15c413dee6007aac2b0c81d250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140012 Malicious code in betelgeuse-transport-phoebe-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c309f95b3ad5cf936b5c7b1d07fd290e8da345f646add5d57cb058718f3ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143334 Malicious code in hermes-xml-auth0-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939c611aff8a4e335a1a4820c2a72eac66c8e27637a83e7aa8e9fa29618dfaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146539 Malicious code in private-protractor-geckodriver-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af28cacd8497956d18903394814923afc24c9c0f191933629f82b63a2f48fc10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145321 Malicious code in nconf-jekyll-firebase-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7085f1030dd1612cb624f7ecf7888ec5125b92a3c40a24bc6039a70cf2835ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141090 Malicious code in convict-rollup-plugin-buffer-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1699050cc592e2f8d30b48677a2a5a646c3a34aec6b04b98382047a46574ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146656 Malicious code in promise-xenos-semantic-release-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f58e029f14585cfdc2fd0f9b661cde86502c305c7822ec44d6a8b06181e028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146687 Malicious code in protractor-hyperion-soap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc172a6e98714542897ff86e8b096def8bd773c0f7a8b2d9a6dde31dba23d298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144139 Malicious code in kaus-cluster-superagent-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e520fa894f85dcf5047f8f11da6df83734d4f0e4807024182938c2148739a349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146727 Malicious code in proxima-pipe-jabbah-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f975555787a6ad9d83c0e4048259f7211319a19264a2208be438317e99ba262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146492 Malicious code in prettier-plugin-markdown-proxima-webdriver-manager-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9dc5b75c820f660af7ac765ce748737d7029924367551e7bfb04127b2b8f42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140568 Malicious code in ceres-hydra-rocket-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e19fe3509407b837afe1cba9748d532e71518ada637a85b02b82a2f65b2abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144803 Malicious code in meissa-europa-forever-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8907b0323156f50189214fc22cd49f2c00cbbef7df9bf25c4388076a13ddb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140638 Malicious code in chalk-ganymede-dependencies-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033aef59b2ea1fb6885746d7c1267fd80de8d5345fe61cf6527714572eb2d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144187 Malicious code in kinetic-typeorm-less-loader-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bc60e05545183c56410196c269e61c5cbeceed7207842d9ff6bfa7a03d3050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147459 Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...