MAL-2025-139854 Malicious code in babel-dorado-firebase-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7276ae4398ea01b17180f7849c7f228687aba2521a6ed7f054c58b4e9383d739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144442 Malicious code in lint-jupiter-prompts-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76f5ff174315c9b4ec3a265e122cf8e22e1c0b6891896257cb53e5174d4e62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145612 Malicious code in non-blocking-kastra-eslint-config-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6733a63686f84a737c0a759a95d9448142cd5dc89513c785f1f746ab028b97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142252 Malicious code in eslint-testcafe-readable-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8ee62a61e56cdffe10f030dcf9491a98d3219334ff1c007935f2c37dad4045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142804 Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149836 Malicious code in yonder-docusaurus-cz-conventional-changelog-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7d9ddd9b0082be83bb6499eee01a3e4626c773b70f7731ac99af42a83c4fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147506 Malicious code in rollup-package-duplex-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148958 Malicious code in uninstall-helios-geckodriver-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be46e5e736ed22f6a90e0fd254b6547b4d2107f80b556b56dc10936c3ef7b7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148290 Malicious code in stop-changelog-centauri-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc4dddb8925f9a970aa7c5687caf4439035af040dcd9f9d60675c26aaa27ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139568 Malicious code in arcturus-dependencies-transport-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2d815a4e59b1e9af12dc14986473fddc308775a2b32f5d80b55972e49c4916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148366 Malicious code in subscription-request-koa-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c68b8002383770872ccdad0a33557462f10d80f27bd85d0cf04a9636bc71571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139556 Malicious code in aquarius-venus-nodejs-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc2e66c5e746f8022215dc50cec9024ea7c7a0932e369c235ebe321beb13fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148731 Malicious code in tool-command-geckodriver-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d4c1dfd04a531ec9f0f8abdf611775cc1f6fb6b997f973bad24c056990bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139589 Malicious code in ariel-indus-telesto-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e010405cee714fc544f42d8632a9cd0c8322ff38222e8bb03224e51fc0cd1eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146340 Malicious code in polaris-europa-csv-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3938c219c4816460cc37546a2fc49b42bd9f2df9bd9194194149724d94c575ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145985 Malicious code in passport-pulsar-virgo-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5757d4b0a6c5a20cd44ab3ba2ec2ad4cf07172929c6efa42f03f1a9af2050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141193 Malicious code in cosmiconfig-prettier-plugin-markdown-yonder-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e91001c644db002183bc0aa1ace65a08d0aeedd08ade3f1f02ec3174c2c80f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146279 Malicious code in playwright-cressida-rehype-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b237a8e7e14667378d4e2a7e5359081b1055c933aacd152a5534f93d3d31de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144186 Malicious code in kinetic-spawn-stop-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb47a933818775e5c62b8dea554a34249eeb42e01db1355d2bff9c72fbe0b567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146588 Malicious code in procyon-electron-private-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1abd1fbf5cd8388dffa1c895ff29edb594569791ac53d32d1bd721ba68fab52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...