MAL-2025-148295 Malicious code in stop-flare-graphql-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fd5efa47d0de28572480beb46c4b09366251f5981c1cbd75c0877711c8b1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148322 Malicious code in stream-link-stop-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de89ad8c3fdaa149d9a03d02efe49afb00b14d81ec4b249c7dd89a53331f42de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144593 Malicious code in lynx-install-nightmare-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a2c2a613c90ca0489c2936c1fe6fb8e684de8d92be0fbe95bf566e4f08e45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145742 Malicious code in oberon-centaurus-eclipse-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab928e91bad85f7e109af50b8b181746c36455110c206e998eb3ec3cb8fc7a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148506 Malicious code in telesto-wezen-mira-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c54640330a7c458d507a8b7649de4017b059ecab3bba9f5938aeb85fce4cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144311 Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149734 Malicious code in xml-relay-jupiter-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20d6a9cc34ca95f2b1723710465fc3398f80bd0aa4f0419a2f86ed70baae5e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148569 Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a458dc1ac56e93a769b5ee12b7dfce2a272d1d772247ce5792ae25d97b27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148689 Malicious code in titan-oberon-restart-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f54b199c3e81770e49604610ad75bea2f44c7dac5b78f4cb3c6f6a4ce64a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147693 Malicious code in schema-helmet-ursa-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49175c5ea031d83e1e3035759c33cd0abdb1402d03075dbd7f0e7f7608649df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148553 Malicious code in terser-webpack-plugin-impulse-inquirer-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74331383fd71651f9cdb11492c213881425ef996a503ea374ee428fd199ffd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140051 Malicious code in blitz-magellan-betelgeuse-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5f69b47cbf03defc947d8b791ac97a071f76257cf87a5173e97303e7d827ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148988 Malicious code in unuk-vuepress-sagitta-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf436562229ae296fff8ff03e66e905874a0ef00f71b4363677a2245ede05009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147763 Malicious code in sedna-despina-pyxis-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d399d73429d9ba27cac764fcba3869ce6e10718127ced0ff53bb89d9614c692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140340 Malicious code in callisto-levels-subscription-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da1da336dd77cd89cb44218e89717c86254a1d963cb305acf62f650a1d7b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140827 Malicious code in cluster-gemini-jekyll-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5048745286b07cf1af85ce48d381d6c247e7e07dbcb4b62a9ef60a15e18de9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148858 Malicious code in typeorm-superagent-leda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4647d217a21dc4cef2ad4a2cd3d26af951f19772cac97e0e79ac9d23abdf79d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148413 Malicious code in sync-adonis-rate-limiter-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5dc33b4b091bc26ce6cac112f885cbde0319831f4fd7aebc4e645088bf967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146713 Malicious code in proxima-eslint-plugin-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1bff0b2371c9718a62b45c8b461c87c10eace4b9cd803171ec8c16ce0a8aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139628 Malicious code in async-json-metalsmith-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3de2ede2b17ab92f94ebfb9bc3a04946b83f63dcaaa1578e8dfc673d1438ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...