MAL-2025-144454 Malicious code in lint-staged-dotenv-safe-pulsar-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57ac59c92fe865c160f36092ece507eedfe2118c474e2d7caeb74e7f1b13356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149173 Malicious code in virgo-vega-zephyr-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02552b14dde06edeef7b347a403a0d5ea395a9d45f99471afc91942b69d47ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142176 Malicious code in eris-meteor-dependencies-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c16ac3e6ae7e90a0087a8a38f3156c3bd5a3d49c09f8f8e770b9b6508b164fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140773 Malicious code in chromedriver-framework-private-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d375d7091322fdaae73b2a3edbe7c96c32587195cf1297018f3f6329e3853b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143911 Malicious code in jekyll-norma-markdown-pdf-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadcdcc348ee3e2427e061db339471ee520e3dc223c25f9e41dd0092d58d434b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-pm2-sedna-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-transport-axios-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3289a4ae791252db9b0ef7245a75e3b7b6b5128e3f7303b30c771848de4c5868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-hapi-luna-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43ca38f4a170173c94afac1558333ea2d8020e9a3392cf0aadf92300b6959d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-materialize-middleware-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7edf3762282a5e21f97e55705f10dce56e313a7824add172bb388fa0ff9e452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-sagitta-public-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b92c8880fb2cbef96c09b19470435e7b296ca92542ccb4e844977721d142592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-centaurus-nextjs-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba9b9f0ec80de37a48f007e55dfa74069ce00fcac7ef4f211b533318ac76a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-electron-commitizen-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c7414e208e7430f5a3b3b2c501f26ce402685f3fe6c97836993afba3b9dc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-celeste-ariel-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8470d16e3096896180d1fdec498c433326fb2287ef760464e34c1c84caeef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143971 Malicious code in json-docusaurus-cosmiconfig-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a9c7c0cb232f49b5048a19ae36888fbf26e1cd53ba27072f1a10a5c6de44de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-non-blocking-local-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219dba9aaf9a81b49e9c15c99ed9480e9146ffc8e9759ebfa7376db6a1c7b1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143250 Malicious code in helmet-deimos-enceladus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6e531a39369437b0527d81e78bfd05af9e42257dbe3cfc838ba5a7f11ebb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139264 Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143994 Malicious code in jsonp-configstore-janus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6491a1ad6532064b4525dda0546ca266738df9e868bb54a32043160081b02742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143553 Malicious code in impulse-rimraf-schema-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f086d7a0bdd974da91e3776911c36ba418c661bbf2f3d9fb1a50f0ca0daa4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147445 Malicious code in rimraf-canopus-promise-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff23d07545c6bf65617bc3e8cda0cc53db851598795f0b98762db3ff60fef82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...