MAL-2025-141703 Malicious code in dotenv-cassini-andromeda-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a4f915d36d6fe7213873533f1bd09b13fbabb4098ca696149c2e6996936169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-restart-webdriverio-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c1899b400267388e1f79138f7b9c4756f3940d4bfbed6783ef7da2ee33251d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a361166347995f8a1116d8387938ce82cbbd896b8be9677f14169f4f20b7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139693 Malicious code in auriga-xenos-command-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec3c3ef11e14e50a517e63caa9aca355427c437df4d625dc2d40a9c70a4b22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144852 Malicious code in mensa-frontend-sedna-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53665ead08c8ec17b51688daeced105daa9d1ac3f82de921c27b8b3a6d165b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148073 Malicious code in solis-forever-framework-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316e03d2d9b03a42cc0a18edfac946e966f105a3ea8f7dbdab34ec57a72304a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149128 Malicious code in venus-webdriverio-lint-staged-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d022ab1c45b9bad09802f9c4a3fadcc11d38c388780cfc540d7dc131bc3bb3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140308 Malicious code in callback-puppeteer-janus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a71e3a54f79672239492abce3e49d32a7cba8825e348aef96f06b7869ba5a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147992 Malicious code in slides-polaris-version-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf35e9d3704878c92e55276f6c4364b9b7151ccaf75ff7eb6050fd1d9fb18df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139910 Malicious code in barnard-kastra-carina-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a9b9022db9904dea51faa330c3c795af208d00d11dfce04befa8c3d077b662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146243 Malicious code in pino-pretty-rate-limiter-xerxes-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abf532044d3c7fd705ec111e6e3edbb278aef7902b90066d9d00267bcb31a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143601 Malicious code in ini-pyxis-arcturus-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdc89424eadb98b9d2b7e8972fd02b2887cfdb4e154f4d2e97576361588fdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145802 Malicious code in odin-sequelize-cordelia-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede57c525fa64420cf83ee79e24cda9ddd78715235b24f77a61720b1a7045f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145512 Malicious code in node-config-juno-install-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0607f694a245a8b1cdbab9bae5459fc129030729b93bd131369458ec27cb9c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149202 Malicious code in vuetify-alphard-dynamo-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55fa9c7ec7f02c2efbe3f8f04e4a49d7bc3465be28ffbf97b4dd6915297c77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142296 Malicious code in europa-typeorm-kinetic-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d512a5890a5e44305f9e42c721f56e63174ef7241f3f019714063a09e284e7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148317 Malicious code in stream-ganymede-semantic-ui-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d2d21c2aba42884dc74a9306d2b5780925eac3e6e9fbc5db65bb2e22d780c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139213 Malicious code in adonis-leda-lynx-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43a62067cc2fa7f0422966b16a4e7a7bcff6ae40aa16597241ef8c0ac9db526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142235 Malicious code in eslint-plugin-perseus-css-loader-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0ddf1aabd198f85639e9d3b3af0ae998cbc891b75eba766e8f9d4bc57097d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145980 Malicious code in passport-galaxy-jovian-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd3b6e206cfd217d9e614b21805457bf1d6c087dec229f9ba390a269465cf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...