MAL-2025-143720 Malicious code in iota-dotenv-parse-variables-envconfig-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b67d0947219d9c28f83df53a00911736d07bef071c3af1c08d8adc6e483569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142727 Malicious code in fusion-callisto-parcel-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78094ec84b44c653fb466d59da99ced3eb3102b8ca8e13b0bef3f006f795826d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145033 Malicious code in miranda-firebase-non-blocking-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c957b2e89a78b2ed4ffc7627c5903a922bb5f6dd009837001276b57045e6a3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148007 Malicious code in slidev-janus-aquarius-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ba6f56b7df95c282b16909eb8377d5e194aa02b52d86685443a21590c3699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145590 Malicious code in nodemon-optimize-css-assets-webpack-plugin-epimetheus-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180a72d45bdbb58b46fcc6d479cd540e67555ef1d4de1fed03fcef981d97533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143608 Malicious code in ini-supervisor-ini-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29a32dd2b265a29cfbec53f5ec524396621a56b1ac1096d46802296fb8d328f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140275 Malicious code in cache-luna-socketio-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ee266d139f89aff6fffba83237a702f6d2665de63832d7becb99225fceef2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141487 Malicious code in deimos-alphard-nestjs-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2a1db44cbf758c023fddc4953d43953b89647c6ce1a2f527ecdd091804b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140858 Malicious code in colors-phoebe-test-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c43aeaa1057f79a268248822cfbb33c3dc5c3fab01fcb14e8148d15d920e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140690 Malicious code in changelog-upgrade-native-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985c3ae2349fb80095178ca8c1c3d0e0171ce3f14382f0bb8265bbfd705918e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145612 Malicious code in non-blocking-kastra-eslint-config-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6733a63686f84a737c0a759a95d9448142cd5dc89513c785f1f746ab028b97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148072 Malicious code in solis-cosmos-commitlint-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2fc1a99145847686612ce007cfb470469dc5dfc4e44c704c39abe06ffaf80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144632 Malicious code in magellan-dorado-puppeteer-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3238269c2f191b403634981c58aa5ffe63bdb37c7dc0633c090a4c8b8d264b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142064 Malicious code in enif-spectron-webdriver-quasar-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe70ac7a9565258eb01946e294f519411e0d3f25611c1939bc738eda55982108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147302 Malicious code in request-mysql-equinox-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983cac0a9973d4c3bbd7015ea88bb041374eeaeee471fba0084e1691bb9c92ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144043 Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149692 Malicious code in xenos-unuk-version-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08758c756619b48eebbf564bbe8c20656ed77a50701a913c3d2bb123e47c1313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139777 Malicious code in avior-neptune-io-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159acacb064f7f4b882ac1b31bf36ebd3aeb9ab58dd49a8c614929e0aaedb33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139425 Malicious code in antares-nightwatch-inquirer-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d268874927e870bdb6787b0c36136404c3128bef7fbbb16cd6313100aca64f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149337 Malicious code in webdriver-manager-webdriverio-build-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a769157d32d7855f2e263fa2a168e8f0f4b9fe1cd1c23bd76f0fc64dddc57abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...