MAL-2025-142720 Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147350 Malicious code in rest-husky-aurora-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80331c1c8333af04e7c1870dc3eca41af5845de120b7bea8a8a466b66e0fad39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143672 Malicious code in install-config-hydra-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276ed3297a64726866fd682b9a60e6b8eb9375954fce02ecb2c46cb27181a072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143031 Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143953 Malicious code in jovian-mocha-ignite-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6831fd7e73db6ab318dda20722139bff9649596d92e387563b666f0778dce4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149203 Malicious code in vuetify-blaze-wezen-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acd317c6a436af395b26d7399e04af36ed8f51614a95c8d7125b905ab6a7f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145022 Malicious code in miranda-cache-relay-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c25fc48147bf1c6d99f70b5ca2cebb2d623c4e9b7720ff4dc0a30b4de084de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146094 Malicious code in perseus-less-loader-uninstall-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0acd2d52c31594304a5cb4d7f1f978a7ccb708ecc08f763b3b072edd8a37b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139658 Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139524 Malicious code in apollo-quasar-hermes-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652e2d076c3ee69316f7b51ec59ecd9c44accaccb4af2c046cfab5c66c5133e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142142 Malicious code in eridanus-blaze-selenium-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ca898291f4cd05fce6b0768f8f6ca08ffbec4dd3bb7a9699d4b2eb9584daec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141508 Malicious code in deimos-webdriver-manager-public-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc1847b052c14b0eca3479e9583bc1ade4230f8c35df49331801119ea3a3f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142308 Malicious code in event-centauri-hermes-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b18852ada8f89c69391c09adc9da0f5888546f603e7fbdedb92e8893f622d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140682 Malicious code in changelog-sadr-enceladus-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3780efc712ce8bcc39951a84d27f0638a6df256d941f660efc4901d9ccf7e300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140406 Malicious code in carina-chalk-init-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef8c8bd4b48ecba82f3b9e360f783e207ace38237e1a23d6f3a7637878b685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148182 Malicious code in spica-terser-rimraf-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85c5ae642215aab8b0b119876bbc8656b8061b80381484e9e2b94aa377a65f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146858 Malicious code in puppeteer-pino-ursa-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7515fdbe15c9c7166a923b5aac6268128105b471683c0d39f2fbe2f131160e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140793 Malicious code in cli-dagda-heka-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50ef1dd0c035a6b8d925ae3fe105e1d5534f9a806ea4b127e43eb8bf0bdc4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147017 Malicious code in radiant-nightmare-xo-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c61b5919ccdc6ceec342de4c981a1542a5edda541b184e746f033085bde9a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140341 Malicious code in callisto-loglevel-electron-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db4a957b6d9ec52cad85ef2144c73b018c6121df283ccd8fad94540c5c1f919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...