MAL-2025-146688 Malicious code in protractor-loglevel-telesto-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a82717f772c19f1967d06fefcd6ef777d6e576dc649381c42dc4cea9fe2dd8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-ophiuchus-grus-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c0eab4b26c9903a2e8f6149673ca019e2febbd8835e556eec09face321dce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-procyon-non-blocking-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd19d7ef615107e73bf38b274c493a453d37f8f166ba1a0fbd790637833e3c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148908 Malicious code in ultra-shelljs-aether-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7346b040e81bb689df3bed542cce8811d5d73d35a48936f4312edb9d0c62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148182 Malicious code in spica-terser-rimraf-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85c5ae642215aab8b0b119876bbc8656b8061b80381484e9e2b94aa377a65f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146834 Malicious code in pulsar-iota-fork-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2e6dbb25e8df909f2e8745754a5e1c6dd9726eac927c26461505360a78dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139902 Malicious code in barnard-chai-public-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f19577d367fc4d0fc720af976a8d7063e66a4eb3209ecf31de69fbf10a580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148435 Malicious code in sync-transport-resolvers-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ae256d0bc9ee4ca201d3790838fa96e379e70cc3ede5fe9e7ed844a7513d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141878 Malicious code in elara-hermes-octans-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bd65c2d4862529c0b647b1f47ae5a455dd8490b38d4c68c7a3f582961826e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141204 Malicious code in cosmos-cygnus-lyra-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea5671549d7a81850a48019ed11bd27275dd856aa63b52f9897f866ec1a5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145904 Malicious code in orbit-configstore-bellatrix-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84856589e5835a0225179325645e11cec438454e45f4e6c72aa2b05ad6a7d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144426 Malicious code in link-stream-global-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f092b3a5f594f4680772e986c332edf9177a9c2c59021a558a60473af3db464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143596 Malicious code in ini-passport-quito-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ffeb311d8f1e110ffa3b60f8f0c6ac8e6d86e6a7314e921dface5e09c5170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147304 Malicious code in request-neptune-meissa-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192ae7b04f04285ae982c76237dc726ae80e3d013cbd96c0fe8ac8e70d13447b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141136 Malicious code in cors-semantic-release-eris-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0897310f2d4b7638a96531a08b14b6e2774efc0bb5cf2777926f172374a687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149544 Malicious code in wolf-comet-fetch-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cb2cd055ee7e7789085864d11a9b77d1aab75944129455913dabd8cf582247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143865 Malicious code in jasmine-quito-lint-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e3ba43d0877d7582fc2289f6dea6ed0681e495e93c77c1aeb965181bff1279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140003 Malicious code in betelgeuse-run-script-remark-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c2cdbc659b5041a4756841648df36f334767057003606503f48480ad4080fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143216 Malicious code in heka-rehype-duplex-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b883096f7d0044441dbff8d74444e22aa646a541ec960cc0db5a82f4552ab9b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139601 Malicious code in ariel-zenobia-hugo-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9c0bbfdb2f4db105e962a12099bc5ed6eacdad8927eaeb93adf91598749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...