MAL-2025-141045 Malicious code in configstore-apollo-mira-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f886345bbcfc473d8d3b4a18ff79cbd8439b3bac331f5bdacfb2166336a495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142135 Malicious code in equinox-selenium-sagitta-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca37b453e659d859d2a4912c5d5f173edfd52f43fecb65ce41a309428b30a762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140145 Malicious code in browserify-update-publish-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24bb06a9bd2ef47ffef67f44536c0d250ec84117202527337d00c75f442ad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139560 Malicious code in aquarius-webpack-apollo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa3d71e1d7a0e15bb88b0ed383e56df383ddcdda804b23c3df1115b266cab90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144177 Malicious code in kinetic-mini-css-extract-plugin-winston-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a22880454f6c3b89cc13ee3e15c29aca4689483d59fc2695a5b325d74267ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146273 Malicious code in playwright-bellatrix-postcss-loader-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f467e2fc268d1b704ef9d37ba01500dbe9f530113c6d49aa5e08f79a0efd31fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142840 Malicious code in gatsby-enceladus-kronos-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68d822e0f178a168888b871b773b6a40775cee41b6b188fba2c28c120c58f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140417 Malicious code in carina-nodejs-spectron-webdriver-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d909a0b8a65012cbd4ed15cd892115f1d939bc275716f29f577f44d5e0d6476d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146815 Malicious code in publish-spectron-europa-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109c0af3a14167896afac3e991da3b3f5fc640bdb673e433085122320a2f2b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147279 Malicious code in repository-phoenix-altair-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56358002f8c5f94fc9121e5c7eed6f83e3b6ae720afe694721b04db71840074b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146836 Malicious code in pulsar-mongoose-aquarius-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae9710894ce0012d79cfdc2c12a28b1400235171405e4b2701bd3b7165aeee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143280 Malicious code in hercules-electron-builder-testcafe-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650e1e45c6b0ae8b1cc5389d03c6b74a2449cef944439b01c8b49099f775ddc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140751 Malicious code in child-process-metalsmith-sadr-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648b1d5ebad02068378ea6e0e761e2874183d1ea7650bde36d994a2781348832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147446 Malicious code in rimraf-carpo-eleventy-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a305a7e1a5fdd412809153cc81b7c65e5acaa9f0851fbe9d306ff17e64c9098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146555 Malicious code in process-jsonp-build-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c952c1fa34bfc6b5000796239edef4fc37cdec5ac23e9f43e9415eb5d6ec65cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140436 Malicious code in carpo-cors-react-bootstrap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d871110fa02601bd5617e3520de63bfc553c86eda11a0f3a7140b61843da2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145809 Malicious code in ophiuchus-carina-neptune-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2541788a9fe062b0b833bad4f4e10f6948f6cc5671e8a94dad7a20f97b530f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145853 Malicious code in ophiuchus-yildun-centauri-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfef0efd2ab36909c134870761c4a8cc9e6ade31076e09fbccc65c28fef81b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-tailwindcss-dynamo-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b0c39532693cc4e6a18279726a197b967b08a795b72a474e2b2678b46a3f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141949 Malicious code in elektra-link-postcss-loader-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e674a4cddae90ffa7220f43af1d7218a93cd063c9a449faa4714fed4383dbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...