MAL-2025-143980 Malicious code in json-prettier-stylelint-leda-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311240dbdb6e2255d7827b9b6f16c5a351db73978700f59d2e023bae65445316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-aquarius-phoebe-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c890e13e784cae9b4d287d7623cd1e8912015819425ad563129337a7ee0ea72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-soap-grus-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c969ec135ea0e9b782b9b6c0dec74f9cd771881a5044ff40e24e14d193616bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-antares-selenium-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79c6aa8e6019e1ce2f7b72a55bb1639c2e4c68449fa2efa5c3e3be6054c8114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142940 Malicious code in global-lacerta-sagitta-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aab090a06890abad34f96c9d0c014ede763e63fe2ccc634f3da5a8b7fa2a1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141044 Malicious code in config-xenos-procyon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e11ee2587ab693fa07da5ba1b7292c5c142aedc22b57b70a9ab70a5176f3aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145696 Malicious code in nuxtjs-aurora-bellatrix-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094ec9940902eb2dd3dd6b6b2332f3acd59cb9f6135a3fd2616bee12fb70677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143028 Malicious code in gravity-pm2-cosmiconfig-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d5d825950e78fede990188d0828c15b780d15be9a2cbfdb65192a4e13a6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148002 Malicious code in slidev-convict-heka-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e873458060196c11220fa6c0f0f376108963d72dc0968b8880d89d1c286153a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146704 Malicious code in protractor-zenobia-npm-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fffd5854a17d7b9cefd4422eff7eba11b7fb2eeac2286356ad038845500e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142070 Malicious code in envconfig-bootstrap-uglify-js-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd4098356c8ae408716b081b72671e5e811c3ef40bc851d469ae14849c5741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149493 Malicious code in winston-farout-heka-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ed0798bc65f6397f3a98555c061206cd8d29c3eb7dfabae22c56a5d8d034c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149275 Malicious code in warp-rigel-corvus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80340d0570cd4df9da4c46fbe05a0e166f4adeb640cac7709f93defed837709e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143295 Malicious code in hercules-server-airbnb-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d39e51f8d9f7bc15046f50bb2eebff5f7edc6e9d0dba9b05ee803e679f340f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139728 Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142720 Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144661 Malicious code in magellan-sass-loader-hermes-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ff68d2dd7d1053bfa0409aff19e8eb4c277ed562bd9d6407f30d9ed4757ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143479 Malicious code in hyperion-iota-hyperion-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98c520b0171c46afb33078873f06fd90640fa07e9795e8262bd23f12c992a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149528 Malicious code in winston-sqlite-typeorm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0583ba8d9067af98e95c066865b38f493fe46011683758f8afbd70d2cea4b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143789 Malicious code in jabbah-release-it-enceladus-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ba66041401f9fbf53f8c5df1da308bcaecccb8d8b4546cbfbc2b5d9a4fec37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...