MAL-2025-146213 Malicious code in pino-cross-env-jasmine-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec70413487935d3604fad3ffe3220304ef0fe67e010a5e0e0bb3f32e2fa28b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147911 Malicious code in shelljs-csv-antares-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e0289f23944cbef7e11f6498fa51536ecbbbd7d2ea016eb28509e35c602277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140433 Malicious code in carpo-blitz-nightmare-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1d5936815c3f7fc7fa7cf85c4097e6689d8d83126c8007b5f525d2c2e31530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139931 Malicious code in bellatrix-cosmiconfig-axios-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a04c21a6b3d09e342cff07e11c6ee102c77d1794b9495cf445dca7e2054fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139870 Malicious code in babel-playwright-luna-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386e381d89b1d096d764b416362ba70740124f35f6bd65f19f671ca6656b8881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141798 Malicious code in draco-wasat-miranda-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7854af127c6cde6e23a5aa64329b6e001b5ca79115617c855e6e263daf890134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146253 Malicious code in pino-spica-leda-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8cecac1c1179d9823b5417fb59873c0562de62cc50e700c3015893a3f59ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145134 Malicious code in mongodb-meteor-readable-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930e449831b2c2435c0ccbe3e74c60049f446ff905ff59bf3c85c206dcd4f12d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145801 Malicious code in odin-run-script-scripts-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79508cd48643557f134d37f5b6eb9f3da8274a39beb434b88d43ed6e801e5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140793 Malicious code in cli-dagda-heka-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50ef1dd0c035a6b8d925ae3fe105e1d5534f9a806ea4b127e43eb8bf0bdc4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141370 Malicious code in cygnus-ini-duplex-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b52fe76d9e5026fde08f9e1d6eb70e48547f0d6ff62a3d66b10fce1d7024f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146627 Malicious code in procyon-xanadu-carina-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6470c43bd30eb473cf516e28c2579ba27275297d6db3414d57ef6451ac3fbe11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143776 Malicious code in jabbah-farout-xanthus-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3c95c10dd0ef23dee9c5b68f961b0d2ae11c9bb1a7180844f016acbc486a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149030 Malicious code in upgrade-selenium-nodejs-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c05fac68d2ae84d2d004354b5f094461e364e0f684064354fb8cd27ba37ae1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139191 Malicious code in acamar-xanthus-apollo-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab9a3fbabea8e9eda0274a512f0c48eb29716a7e17bb3f5383dbf3e01f197ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143412 Malicious code in husky-child-process-lint-staged-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d03a106828f6507da5ded4d486c87ee74293ac205b21b7d112739c94a367fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140711 Malicious code in chariklo-rimraf-markdown-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8188880b724dfab1146bffc49114e329ee0a92d4ae9911e590dec3f53e07ed7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142695 Malicious code in framework-vuetify-antd-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04622d178d1bc01f3cc6ffaa28516737ea39eae5248234d3a0b81e4615c3c447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146067 Malicious code in perseus-ariel-andromeda-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de31a6a66ad37cb2e85b252ac93e639aa708db96ee4e4ecea8f7d8775c5245d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146246 Malicious code in pino-pretty-winston-json-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d7ced402c9f3523ed686f438c023726ebfd93a97fbcf9f8146d5a2d75988d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...