MAL-2025-149501 Malicious code in winston-javascript-fork-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31d8ef523f64895d99cdf3b37549e07b7ff03de07b73488c2b778f8569fd1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142659 Malicious code in fornax-uninstall-epimetheus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d813f7d77d1e40e349270d27bb8fd5e7bfd218b0b61439723e65f93a8cba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145355 Malicious code in neptune-chalk-html-webpack-plugin-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cd6f6bed9776d6240e81efcaf980f3e86f7f36bdacffd76d292c2d9397deee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149360 Malicious code in webdriver-mocha-npm-nova-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c5f0fef0802f17d6acba2e736999a4bbcaa1d25cac8d3897d67847a0380ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141929 Malicious code in electron-rigel-bootstrap-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6bc5104c5c7e429d0d8c1f83f94dc9e0d96b43745df34a274ff9d81becdd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146117 Malicious code in perseus-spectron-dione-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e15fab69ae105e30fba7e3a24c1bc57c283d108f92197936c36532b038d9c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140185 Malicious code in build-loopback-transform-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924ddf85d741db918c5a6d6ebd1936d82c9d9258cac2248b333c3e1ff227ed44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148639 Malicious code in thuban-acamar-geckodriver-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2efe942c0be1e5d266bb42a397eec4438ab5d17f13940591bdfcc69cc152a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141639 Malicious code in development-warp-halley-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbb3a25f9e7115cd8827ab56a1321c0f8f884a081a2f18d75c542301245404a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147869 Malicious code in sequelize-gravity-jasmine-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228f87b36c2904f348256f3417d1250c227305fbac8fe4a7e906258214771d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145334 Malicious code in nconf-winston-standard-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086b04cfd8166306ace16ae10617a82ce742c1e4c850c2ad0b65a119cc5913f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-quito-norma-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee947f96603b2eccd772524f01f17bc2300762074cbc270bc6b8bfb89dd1cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148175 Malicious code in spica-publish-bootes-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ece20926a01bc492b313c3ba1b53af1fb0a45983f262b91e3b4e465a511373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149131 Malicious code in version-bootstrap-query-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c714f8e5e8a905a8cf9dbc194b375cda3d1617f651317d938dc36dbf8dd250a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144296 Malicious code in leda-style-loader-pyxis-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaec0232e4a46f48d132b5c24d990bc8257f4d2882219fe80a1de80736883a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149436 Malicious code in weywot-duplex-meissa-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c2f5605f67397ee5dbe46e63f07211ac8cccf32c5834fb4218299cc9736f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146761 Malicious code in public-magellan-elektra-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fab38db705f92cf1ac9bac0004d21420f5542fcc39d1aa5f483a4205d37624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146614 Malicious code in procyon-rehype-promise-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20a079e163dc4dff6bf1a7f99b497723fecc9c4a0f47079f4042c121d0e92a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148635 Malicious code in tethys-standard-miranda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d3c30a51abc91b12f482bb8456a6a71fc95345ed667f032cfef13cf02b6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148179 Malicious code in spica-slidev-ultra-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8279bbd45a36576c365070195f23b84851c549e19d14de6869131e7ad0555cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...