MAL-2025-139274 Malicious code in aldebaran-elektra-alphard-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7d22533d420b889973435226c3b0b684966479192d793f2fd1b62ba75ad695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148122 Malicious code in spectron-protractor-nconf-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4dfe990dbd0d65d1f78fb921819fad3f8ebe875a224734af2b927d4d3e8d38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148002 Malicious code in slidev-convict-heka-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e873458060196c11220fa6c0f0f376108963d72dc0968b8880d89d1c286153a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142892 Malicious code in gemini-build-regulus-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0954309485e0116cd28f04502a67aedc87c6618aea4622ff3fe8d3b154f2583b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143607 Malicious code in ini-sirius-ursa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66192a4c2d85e47773b11e7fb2e2aa20818e70a0701268640be7ec5ad95c09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147510 Malicious code in rollup-plugin-callisto-figures-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144435 Malicious code in lint-dione-publish-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff882e7626745936fd70d55ac96b8390b9cd80e97eff19f2a3bb2a37cf345a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146002 Malicious code in pavo-miranda-oberon-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e045e078de01e3ce8c9a68defd2bebe8212d9bf603e6dc9faa91cdda033f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143294 Malicious code in hercules-server-achernar-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25a04d98cb1ff32a8ed86064410e8eff0f1de7c3b742d7fd02bb1db5f63b962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144950 Malicious code in middleware-despina-geckodriver-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51bcf9b0a4564225e487b23317e9819ec1bd08d84ecbcd8de05f87a50369de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149329 Malicious code in webdriver-manager-node-config-kronos-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1487a2086061645f46505d0ea84f0fd8978d75ca814f8bd71fbbcb525ffddbe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141007 Malicious code in concurrently-hexo-weywot-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc8cda0f2eb6119ce7dccfd4014dedc2aeb7d4453e9ef894324d158b657e121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139548 Malicious code in aquarius-sass-loader-morgan-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140882 Malicious code in comet-mutation-hydra-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf23dea65fac62655d4797e17e72c4af1c8440834c87f6901137f94fba8bf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139316 Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148776 Malicious code in transform-uninstall-octans-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f86db654307c7cfc379ac92f24a6d4c504fbc65b67b3f390aba1f04cdec2819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146936 Malicious code in quark-reveal-md-celeste-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5568b1cd7b3d2e9e1d8546d082480728d7f551c9145e3f355500e058de64c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149191 Malicious code in vortex-scripts-scripts-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0409451d1fd539154e63a0e4b69cf370ab76eec634798644da864bf87004163b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140333 Malicious code in callisto-global-kronos-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684e56e46ef72bf385d82b2ca44a9ec22885037864e2c73ade1ce4b3baafa169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143464 Malicious code in hyperion-auriga-mensa-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64aa001e3cd0b2df7437e7ca6a9b819ba8bdf545081977ac1ebe1830f7e0d3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...