MAL-2025-149561 Malicious code in wolf-sadr-venus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5820b02f0067ae5b03cd0c76651fda8b7b47018dcf73f12959a8d003d8a8622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148404 Malicious code in supervisor-start-janus-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106a66b1ddd60d3ce3a7e35ddb9c1d22267c13ae8cba7bcb30d713380cb27441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145396 Malicious code in nestjs-geckodriver-avior-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62e204bae2fb75e674c3daa56e4084b44aab006ab2b5894f7a21e17a775b5ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-test-subscription-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d44c8f347f9259815377f9046551331ed049ec56409a71c787321e315eb948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-eslint-plugin-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1bff0b2371c9718a62b45c8b461c87c10eace4b9cd803171ec8c16ce0a8aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-atlas-despina-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a7d6efd6baeb724020db9807fe266b2a6de8f0b3a65477fcf5f4ec343b8eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-centauri-pulsar-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6526bda239de64c4d9457ab972fd6ad08c667ce2fed1a79a3cf3f4a444fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143360 Malicious code in html-webpack-plugin-epimetheus-async-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fb35774bf18006575735aea11ab5c4dcb09ac172c921835ee6157fbd4dccbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149129 Malicious code in version-achernar-nightwatch-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9642aa3daebd57c9b6eab0edb71eb31b68b0c1922c4f298ed95d98b9da1aef15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147594 Malicious code in sagitta-elara-yonder-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fee22a1d8c332151e77e19d5f4de43f8842efedccdbab6bf08ba69d58d5140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-deneb-request-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8764e4fcb6d47a864d8253ed1edf3345e21de2108d51e7d97edb476081bf9361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148515 Malicious code in terser-css-minimizer-webpack-plugin-loglevel-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7935d20d07e495cdcbab1cc3dda880187161dadfe8d56c02d11fa5e642119489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144147 Malicious code in kaus-jest-miranda-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4e3f11822f69cc3af5103540deaa2a91bf3bdeb149f75822db55827184c9fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146604 Malicious code in procyon-materialize-non-blocking-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bc6c2ca4e1c5683d6cd7b60e5b027a62c82412bb256bc38dc1ef4c888bad6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140230 Malicious code in bulma-ultra-meteor-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdfd1deafb4b573097ef89a887d9922514d7aceab4f029d5853fcc750934733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148527 Malicious code in terser-mdx-barnard-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e936f8272f0b58889aeda20875ae5a6f79498e3a9da9280a2fb5b686cb6e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142271 Malicious code in europa-impulse-chariklo-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03c6cc4cc19364598b7fee08473fa7953fe3deed86359c01901586f8f86e716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149528 Malicious code in winston-sqlite-typeorm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0583ba8d9067af98e95c066865b38f493fe46011683758f8afbd70d2cea4b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141042 Malicious code in config-umbriel-tailwindcss-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b504ad2784be5eabf4f348d8bacc2bca3fca7f160530f9e1132f55d1142e1d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-vuepress-corvus-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14f3fb30811f382eb1461ef9900bbc9345ddd47477d39478075edb9e7c316e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...