MAL-2025-149410 Malicious code in webpack-titan-upgrade-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ef361cf0faacfe095bff53e3ccd8868652da7534d2db2933a19a04a97ef813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-soap-grus-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c969ec135ea0e9b782b9b6c0dec74f9cd771881a5044ff40e24e14d193616bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147816 Malicious code in selenium-stream-fetch-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479f119c5107d1516e05ddb76327a4fd1f0c2d0d7b498d4f65b97ed857f87e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-meteor-nodemon-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0936c12248fcd3921a0aacc79011e7a024186908318bf5dc11c50e41e415e551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-subscription-mutation-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef6069b47a6b2862e67c0f0f0744fb681095e2822c4e2f137380f566fd627e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-mocha-mutation-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba86765ad1d4909a393eb1d62de286cacd7f00f07a84862e0f6f275d9553d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143749 Malicious code in iota-webdriverio-solis-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4629d0df2dedd06e5769bfbd601cde8199384d4cdf2eea2e5e5bcab3efbbe6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144522 Malicious code in loglevel-testcafe-kinetic-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b35b09e0a0d18b36c54fbc73754302779000e4a4c2f94804e5e040b67669a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144164 Malicious code in kinetic-betelgeuse-relay-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcb555e3d60d4afc142c75c5e27a22f2263818400a0c623dba7c4630cdbf9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142401 Malicious code in farout-changelog-apollo-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c724dbf3bc227757e4c0bf560f5f7313bab426730af0b9d0c024502630d4c8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139818 Malicious code in axios-andromeda-dione-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab59a545a758f3f8ded31ec284cb9f47a3b3ca66dc254eb9f6cdd08d4c65ccb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143031 Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149265 Malicious code in warp-charon-ariel-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1a5ae50051ae441d11737e60536d7cc4a8b92095a594b5f7e1591a7462d411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143959 Malicious code in jovian-rollup-plugin-jest-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f53370f26cf3478ba29cfe3709afd2de86c87b49aacc771a6ad02106cda567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148049 Malicious code in socketio-draco-blitz-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142718 Malicious code in frontend-vega-scripts-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cb149246ad2c7e590972e3b6925a4d8643448dba30c756d943fec46586c6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cc193212bed6198df35f5621578795bb225e27e93d902cea7802975cf77b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous-beige-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c394683c3a56d492dc7a409254c3ae7d7f5000509e733976b71cdb97b8dce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial-violet-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdd975028340ddc128695447a0860371a8dea796ddafe7c4d7b5ade58659241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138589 Malicious code in arrogant-aquamarine-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4535408140bb8e818c8cc4ee0609e16220b8abb105c6d979ff49d9924fbcec02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...