MAL-2025-142352 Malicious code in exec-mocha-pipe-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98eab42201e22336dea2c31ea0ea8cc9c09882c65535f3ee18ea10f719c32e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146416 Malicious code in postcss-magellan-ursa-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce8458ed2741ec54d9c40e4518395ab915bd46356a551b9e18b8511ef6e3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146259 Malicious code in pipe-await-got-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40e789ccbb5f530142799e6b4432dd8fbdcb5229c1554268b72c421195642d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144824 Malicious code in meissa-pino-supervisor-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b469ab036f2df2169a72083315b0c33c7cf86cf51ed9219beffc4d2b3e4a8dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145155 Malicious code in mongoose-javascript-cosmiconfig-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0460219f1419054f30e265dadd5b11cfe5e7dd6e47ccaa607a01958dc356c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139919 Malicious code in barnard-vuetify-lyra-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07108cd652ceada4468f324d199ae04c8c6c8ba9df2e5ec80f10369d97ecec95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140714 Malicious code in chariklo-spectron-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d78c278ecff4ebaff38abca456c02346ef98a651fbad21ad8f688104cf4822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143712 Malicious code in iota-bellatrix-husky-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2973f9118f939e46c373ee35b5c10d61a18a3c353d952bce4928a4ce858d4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139235 Malicious code in aether-nebula-sequelize-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0094de2b5d9b566517b29185064674e61f7198e886fd9ff5e9bedf51bd2d6f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144901 Malicious code in meteor-canopus-upgrade-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d09d00e0176b7649356089a99de32bd8bcc56b1f20e12d4d752e062c992a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144879 Malicious code in metalsmith-jabbah-sails-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b31ae985f128fe19af9bee9ae4011ab98d52966a366502d7d9f65c3788a3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148223 Malicious code in sqlite-configstore-remark-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dda14679a98ebec10e2ad050d79ebedfb942dea17c3e772d9a36b935b88b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144464 Malicious code in lint-staged-pyxis-webdriver-manager-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc50e3aa929a131d682c28618a24b80bb1df55cb791d02ab06ddbfd580f66fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141376 Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140675 Malicious code in changelog-optimize-css-assets-webpack-plugin-leda-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5f4f0a1427e61d0122916e6836552a05180e8e2081f271cac87516f12674bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147434 Malicious code in rigel-magellan-dotenv-parse-variables-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe093cac103df96e3cf63a8bdf1cd5e9699d5cab258f8a183b4539d9dfcf564e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-xenos-child-process-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89afd7046dc02e65e205937635f26c7474c3f5c9ba7e19863cb1fcd4455e0cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-nightwatch-grunt-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fc8c622c7b8c84752409cab69a5ef77d9b69dec185ce3d8c15d43a4c58f751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-build-cli-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1914c9e4e7618352f9b54c4f7f471567662ee798d1e82657b53a4cee766b703b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-puppeteer-gacrux-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5322f7020a1f3604bfa09530366724aeb5e0f81e7f891d16090afe79b93494e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...