MAL-2025-142934 Malicious code in global-fomalhaut-protractor-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd11327901ff2b5080328d85f1d8ef235277cd984bf86799e95dadde492694f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140898 Malicious code in command-child-process-perseus-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3677b217765d5423fe859eadb36db03aa7596c2d9df7972ea04455361e5815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144806 Malicious code in meissa-fornax-ini-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635fe853f926b64f3ffe8ed1be352a1c5361633308b5d473efc4932804483edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-protractor-loglevel-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d16a7033d42bdb4fbfafe22f856e5fb27e0364dea6cc4a01772b651a18961d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-chai-deneb-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9fb6478dd3638f00e16753a5839c017c4696e62a8cb64c5dbf9b7518f59cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-dorado-webdriverio-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2904272d156f0b2957cd0ed514326c046b100b1bba6c0fd4d6d6748ba4a431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-commitizen-markdown-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8e979a090f60a54fca3f0d3105d850cc6f5ab00b9a750dee625b3aad03d57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-passport-sequelize-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de45bfb716eaeb6454afb5c70c2a2b00a793a3ec1e07000068e8e5a5544abfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-fomalhaut-cypress-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e610ac0879d7d61e6f41f0587dd9f753775a9d82956e80f4a8a486ae1f56d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-prettier-stylelint-testcafe-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4618205a87f80f36fc1c5ffab89c4a7f8851cef1fd278fc5faaa3a56cd859d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148413 Malicious code in sync-adonis-rate-limiter-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5dc33b4b091bc26ce6cac112f885cbde0319831f4fd7aebc4e645088bf967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141667 Malicious code in docusaurus-hyperion-postcss-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc5c61627e6280aedbdb49c22147e97245479a467b4b4bea6b57a4b6531be14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-backend-hermes-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05940c7f294c6b60ca9948a699c21c99f5ece74f5993de0fd374cd1fabcc5464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149464 Malicious code in wezen-nodemon-spica-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77ff6b3eca8f27c52994004cd463f9db40fca9bf33131b79db34028edd8dd2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144363 Malicious code in levels-spectron-webdriver-callisto-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f588c6a8a810d94b41a205dab476989bbd997b1a75838b16e70916cce569fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148553 Malicious code in terser-webpack-plugin-impulse-inquirer-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74331383fd71651f9cdb11492c213881425ef996a503ea374ee428fd199ffd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5417e9da38b97970cf422e0bf4a8e3c818f014707aace9fae32aeaeee52c2907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gaplek69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efeb5a84cad4d8e2cf1c60b4623988455fc3f9a6f862331963114aecf097df22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2050a7c2bb2d9fe852c1f1eaf060c731a064fab5f2b73fc1116c28937caf81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132620 Malicious code in content_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3750c0099cf8fb9f792da4eaa816c12d2598ca5547020929148f57c382eb3e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...