MAL-2025-144031 Malicious code in juno-magellan-acamar-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e99251e7b6d6da522255aeedd0b8687a7e623c19e891943c12469e07c795ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139506 Malicious code in apollo-dotenv-safe-adonis-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcde924ec26f252d60febaa53742a5d726f948b604dba32301d3f6607eeab559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149526 Malicious code in winston-server-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a935b48f23055193d417855846e711c8fde219f4087d81c066ddacdb7f0d3e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146634 Malicious code in promise-castor-pyxis-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e998a570333fa94903c03deacaff2fab31b844d926782cde24c805305d916e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149365 Malicious code in webdriverio-dactyl-node-sass-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d82883c4820c0624706b644e21797994f6a8e2cd33da1ec89e6da0d2cded544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145883 Malicious code in ora-europa-tool-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e006f42e194527ca2cc8573e612feb59b34bb39906c9d9544474f1576887f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140193 Malicious code in build-terser-chariklo-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed23b79eed8301d5dd64081b506129fa0dd8086dedc7df9b4ba9d963e3bae94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148138 Malicious code in spectron-webdriver-restart-cluster-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c417cff21456035f8c3ced2baa3c4dadbdc2048dfdb5510a34bfe0d3ee045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143123 Malicious code in gulp-quito-typeorm-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d835e8e0d74ec55eb6e9aabcd80148a390649445d256ee27fa0fe751eb1619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147810 Malicious code in selenium-registry-capella-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ab3f71e7297e293a72649daae86808b298edb1456fd5e8450176bf422af724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143494 Malicious code in hyperion-pino-pretty-levels-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08cf000500f7bc6707a3671673ea49848d88c3e4d7af2d855f8bd4e0cbfa69e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146006 Malicious code in pavo-pm2-neptune-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b109d7e83f56cfbd62fa42f654d8684db4936fae55b1716ecbdad25efc8f1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142299 Malicious code in europa-webdriver-manager-jekyll-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a7da46a69a160a1fdd63a7030f032616fe4f7f020371a278975b7d6369a19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140104 Malicious code in bootstrap-fornax-test-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6adf60ba9bef1c75805ea586f8259b5b5ddb53f5837ecb17beec187d724952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144355 Malicious code in levels-levels-ora-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4502d31e1f09441ce3987a7b5f54e91d5b3b26deb2544d135b60d2e3face816f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149025 Malicious code in upgrade-nuxtjs-express-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f463e51bb569f852016d367e970d1d3e953d744a35949dceac6393af9ea40500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140982 Malicious code in commitlint-exec-express-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb3b8d5b4ab25056cbd1b06eba3457a1d6a463bc5d8d8387004f7ac002a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144741 Malicious code in materialize-express-pipe-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39da7e4b1d7e60ee0615d87ce284dd64e6b3589d46b59a2f04f438ece588486e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148813 Malicious code in triton-dotenv-safe-typeorm-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6431d75faece89bdf15b8f09d6765e8eb9c3f95eeb2c4b6c1a76c4d26dd91391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142154 Malicious code in eridanus-registry-nightmare-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e598b5c68b81db1caac8bc9f7943296272cf21fefb75a73711750c94cb94c330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...