MAL-2025-145499 Malicious code in nightwatch-xenos-ariel-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbf5ed0ca944dbebe9f864a0a6b60b91513f5117780f132dc0a0986272aff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147487 Malicious code in rocket-yaml-vortex-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d811a92aad91f2044cc7af5650b6330b10cfc7c3804ddd909e5bd7a1853b517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142620 Malicious code in fornax-fomalhaut-forever-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97181f8fb9f738f11f4c8c0ffc05468f3f7559bfba7aabd1285be7e7ae7db103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146034 Malicious code in pegasus-helios-bootstrap-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443c660eeccc84458663b73683dd4f9945a478b35f6e205b836a99b218487f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139603 Malicious code in astro-fetch-orbit-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4a4aec0103e82a9b92eec6da2e2f37912178bf0574e603571607567dc07da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146479 Malicious code in prettier-plugin-markdown-concurrently-helmet-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01220b55cbcc05145bde2d9bc7588c46bd85939bb8352243e4cbd41f629045a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145739 Malicious code in oauth-zenith-pino-pretty-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88e0eb585e086945dfbf2008b4da72a58c538e8c2d3c8381af73c3b25181029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139343 Malicious code in alphard-writable-enceladus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccfec4d2517dd03a12e8231fd31bc5c85ea5a4dbd11b1c6f704472ec91ca385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149651 Malicious code in xenon-mensa-wolf-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db5db959af39c9edf8f563ffa5944b303521105744334beef652eec89b55a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148996 Malicious code in update-ganymede-typeorm-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d9c347f981d0c30b3542a82ff394ac958982da974b04c61e44d8d637fd24d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149348 Malicious code in webdriver-mocha-geckodriver-alphard-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424af51b3129b7f488560fc79efa78acbfe2a6acedce4e79dde2a31d03191a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146526 Malicious code in prettier-xanthus-mira-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84a4a84f5c6957d09542a7fbcfa103162352aa4cb119d5508f2321327c232bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149318 Malicious code in webdriver-manager-fetch-epimetheus-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80104e90fd19f09841b6626aaa8cbe13df52164d7956580530aabff25a1caaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-europa-cluster-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a563a155a4fcc5190b127922618b5c189c218e5ce7e7be368f7fee7d1668e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-luna-sadr-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16462d0ef7a890863b7fa94c464a2b54c651b156d14de9f454999771ad47d84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-iota-sedna-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0951cf7f9333702afff9bb26db65d093a3a169d26b74598e2e501bcd246b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-regulus-superagent-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc13f76788773d5d2e87dd70334fb448f2b74ba088626599ff5a7c8a2cf7481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-mini-css-extract-plugin-cordelia-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24286624def132ef9c376a35c74006cabf3598f7c1a32d194a5a9b4fdd37621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-phoenix-eslint-config-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e2d78552580aeb2d96be7e24039e24b488659a043cf2e9ade9ba758d552722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-configstore-kronos-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6152d31759998ec7f7ff0c7f7625b2df797123c6f92b91550da3d5be8bc0cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...