MAL-2025-144133 Malicious code in kastra-stop-vuetify-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277a72bd15a20407adf823289d0074b355848164fd8d6bbad0ce7f65c6407b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147020 Malicious code in radiant-proxima-dotenv-safe-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cac62cb9136b42af9e93753b4d8863a059f0e4b7df80eb6aec0f46a5de515d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146757 Malicious code in public-deneb-capella-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71646657fcef95ff5edb1350b767e161fde867e8f784c1cd2a4f910a9f1e9912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145822 Malicious code in ophiuchus-janus-bunyan-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1707429e67eff91832e0f5995f787179dfc97689e79ba2cd9d550934e81e0272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139690 Malicious code in auriga-stop-superagent-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02492b37e28b9d77ad388dd39b50a704ff7444051a21fa3cce80a1dda08ef6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142507 Malicious code in firebase-playwright-comet-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d883cae754a7de5adaf031e19a74cb9d8c2fa836bb6d9a02a43474cdfb3dcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140757 Malicious code in child-process-telesto-test-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173fd53c1da999600d870a02683e28098bb3288c9a590b7739013b33c2b68fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140280 Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a3d4d5f839eabf76c1685618852ca8f8e47c947a0394f2e9ae352f14632373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143481 Malicious code in hyperion-janus-mutation-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba7b7eb0f6c687a9bcde5c0c532b5d9698dc27484469216a559c9bcc183edd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142305 Malicious code in event-axios-elektra-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f727e46d13d502f5467c3574631b18795f11aaa68bdbfd4d14b263c00f2b246f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139318 Malicious code in alphard-avior-electron-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d2c468b04a822b76a02641754e6a432183303be1da6df9eccbe3b7fde12fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141858 Malicious code in eclipse-pm2-middleware-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a827d03584958286b872f476566e28d5109d4f9b6c36b5b27c391bc961ff95b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145372 Malicious code in neptune-phoebe-geckodriver-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5772d139b81ac3c704466a814b41007e8de96f4be277d3ee86500c48f6a33ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141129 Malicious code in cors-mdx-spica-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a41993407581197ea7067a764303b3c1766883415c39928ee3651e5278e64f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139964 Malicious code in betelgeuse-airbnb-cosmiconfig-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2ca7c054c5dc5dc4749da5d34633882bc0f11a8ea5e0349b8a44949a61697f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149518 Malicious code in winston-ophiuchus-native-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936180fb7f70ca447bdaa3801548797677e77685b3a6bc1e6ae6806bb2207fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149367 Malicious code in webdriverio-electron-eris-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da77ab2059298b817155b92ac964758be6ef5076d9b7cf35ca406fb0edbc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140923 Malicious code in command-xo-ariel-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a366c080a4eaa2648f83bcb94435f3176e85614a052f24641242493394fa733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149712 Malicious code in xerxes-ora-neptune-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb0059a18193b612f677898d5f447772d729b943e67241154d60529dbf2036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146493 Malicious code in prettier-plugin-markdown-rocket-jwt-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e316f717f951684854f53cc9146802095eb05c75ed1e3c191dde9f06c5ce10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...