MAL-2025-145100 Malicious code in module-commitizen-ursa-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3f26d53b29b1bf3883da585fa2b4f95ac153556379e35b88240b0e694943de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141803 Malicious code in duplex-babel-npm-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe1d62d8945bed9474281bed75b3cef1cdb2f36be4c2dab9212839a18f37a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142709 Malicious code in frontend-mira-indus-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2f5b74653ef8684794a4ecb5d3a754b2e0b9cf2db7fd5352e3ff15ddce16d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149665 Malicious code in xenon-tool-acamar-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfa2fd7bf73fe49b6548a52cd6ba56ffcb1fef7d9aed7304babf08c7991af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139732 Malicious code in auth-thuban-despina-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994aae1a5bffc21ac6c1e7d02d8aee1f9f9b02e29f12defd7293fa63c496981c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146686 Malicious code in protractor-gridsome-levels-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da0a55e3c7d60b91f3bf11a33482c6cf3f299f5b9285ece091b50d6d1699e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143720 Malicious code in iota-dotenv-parse-variables-envconfig-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b67d0947219d9c28f83df53a00911736d07bef071c3af1c08d8adc6e483569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140736 Malicious code in charon-start-miranda-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4739b0491b5f29158a524432828b6abf6fc274c2a323ede927229fea9fe88f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146405 Malicious code in postcss-loader-pegasus-registry-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da724633e0b2627cc47e764d76ffc267a948d6191d9f6aa6ee8f491a9fc1e9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143926 Malicious code in jest-hermes-configstore-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55cfe725d260f2ff8e857501ff3c86c3d6102de8a1412fb9208bb9189e66ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140635 Malicious code in chalk-draco-wezen-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b6b4cf0c27e8f1ed145b096b6bda80b9337b30903760551a33b4c905bb8224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143952 Malicious code in jovian-mira-blaze-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7a31a0701b775544671d1d8f873a6e0cfd3eac66a6004ec3924bbdd70f5eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149722 Malicious code in xerxes-testcafe-sqlite-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e45bdaf5ea929a3a996d1e89e1f31880f504fe467aa313d14ea669a2d3d985a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139416 Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147689 Malicious code in schema-corvus-bunyan-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5e35c4ae9f8c181512f92e13b544405cdeba2a3e82a7feec814e7daa456142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143522 Malicious code in ignite-pm2-postcss-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8095a9cb35cc211097688e59741a37304773dc1f5130ed8ae6a8a9f8eddfcb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148240 Malicious code in sqlite-spawn-ultra-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be06e9b3e8c2658261f00ccc757cc103e2be3f4c5ae7c655f5dd153755439ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142727 Malicious code in fusion-callisto-parcel-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78094ec84b44c653fb466d59da99ced3eb3102b8ca8e13b0bef3f006f795826d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142188 Malicious code in eslint-carina-forever-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f91ef5dc4c00f9832c98df57115357c304787af3987b4df8eb1f049d795218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147952 Malicious code in sirius-foundation-sagitta-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3ab63604cb13b980d2d70c5b2c199f034d114cdcf1aa758bbe94394b8f2ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...