MAL-2025-141100 Malicious code in cordelia-kastra-mui-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9153be71dd128015064d23635b4510d601f804fe1986f5a7a8af04062f75c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149366 Malicious code in webdriverio-dotenv-safe-andromeda-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30882c5333071e479bc604754a3f9a75c212b00c96cc28b0fce68ccf9133706d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147350 Malicious code in rest-husky-aurora-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80331c1c8333af04e7c1870dc3eca41af5845de120b7bea8a8a466b66e0fad39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146627 Malicious code in procyon-xanadu-carina-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6470c43bd30eb473cf516e28c2579ba27275297d6db3414d57ef6451ac3fbe11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146688 Malicious code in protractor-loglevel-telesto-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a82717f772c19f1967d06fefcd6ef777d6e576dc649381c42dc4cea9fe2dd8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146834 Malicious code in pulsar-iota-fork-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2e6dbb25e8df909f2e8745754a5e1c6dd9726eac927c26461505360a78dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143377 Malicious code in html-webpack-plugin-xenon-gacrux-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8797f8c0a1877750170b218f6c97b2f623a50b4c2e852e546a045d85c3cf496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140067 Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146858 Malicious code in puppeteer-pino-ursa-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7515fdbe15c9c7166a923b5aac6268128105b471683c0d39f2fbe2f131160e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145835 Malicious code in ophiuchus-phenomic-alphard-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58fa29011d4a3463e0941cacae1e2932e8633bdfa6a02fee6fceef04cf7cdca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143997 Malicious code in jsonp-html-webpack-plugin-epimetheus-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6b48ce6c4a45cb2fcc599034b019f71452bdb46a97116784b1fd1d4b5b2e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140811 Malicious code in cli-start-husky-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0712137e87ca31bb76b274c076a97cafc8f641b51e58e58d7f08ac05db42ee91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139153 Malicious code in rough_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19108e27330f7983ea1c58606bfe8b88286db86f41acf90b79117985b4756a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superb-aqua-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e89b8c43616e16c5bbefacba13115d0ee832127f288a3f7663f97886c21ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant-fuchsia-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26d98847cb88065c9bd3145efb5221682bc8ce7e0457d51df25c26bc7920d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well-coffee-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91de84200bbd114ea645aecc77a354960effd3153ba8d61e9a14b6cb58b5d9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cognitive-white-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b31ada0c29e36ab82145b814e1a1dd1cef13b83bfe78ebc8bd17b90b2007f53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139052 Malicious code in successive-black-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd34b8ce3d91a506dc374b53c9dca9aba4ea5c107d9193e2bba78fc1b7f93ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138775 Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139101 Malicious code in vishalgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b054b1f9806698cae3c70421a3f51632847d10f2bd35cdecf13096eef910d19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...