MAL-2025-142164 Malicious code in eris-carpo-changelog-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22816e5a878f034b46e10b257cb9d4853165734acc70317b7a6dd2ec0aa90a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145200 Malicious code in mui-dagda-loopback-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26eabb85f51c5683b53fc8263b96d185f7eaaa441a518da48c50c0d6bfac767d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140198 Malicious code in build-wolf-kastra-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03dada7cfbd3c9b525f4da20a53923820753281a805f97771a572db29d36a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149740 Malicious code in xml-version-rimraf-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8e258cbbd7b05fc7b948248f6d0922d4fcb8d1fd555abab444074a2c1a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148052 Malicious code in socketio-fetch-deneb-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257183e6dbffbc9a14a3cc9fb84f992087f217c37378c096b9e0c5a0d86f8502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146485 Malicious code in prettier-plugin-markdown-hyperion-xo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae3a09c4166cbe887283171af6a1441547a9f112d8b65ee4c1dd48fd5365250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147189 Malicious code in rehype-testcafe-iota-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d5a0ef86d9d1e26796efa729b64cfdfbf09a3a2a2669f32d1e01e0b38ee963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142402 Malicious code in farout-chariklo-jasmine-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afe9386e40599cb48ff675289b6a309d488a323951b6c444ce1455dcfa503d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146277 Malicious code in playwright-cors-bulma-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe1fa01ee2f04af77ce20ebd02184ddf94ed2d21d9d64f82efe3f412236a439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139172 Malicious code in acamar-dagda-canopus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77f13b3a7f9e9e576d7e42f24d4d463de5af216c31245b4cecd87f52d7ba10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-peach-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e30dcc58bddca5b500b777db9473dd477874723af2637af2045b58fe4b702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08561742a4b64dc0950f7888c6714306acc1fd50e29e1b8e2140835cd7bbc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-jade-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68604dd963ae18ba2aabf6cd072036bb3fcdd5a087756f0902a02d96c1967bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138963 Malicious code in racial-chocolate-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df767f4c41ac852c8a914c950c465822ae421c0dd34d5e87fe8649ecb5aedb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138761 Malicious code in great-cyan-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79bead203127cff55897677ee27bc4b303765183b5983958974d3295bad368e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-lavender-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be406abe776b818c911262390171900eec0aabd095ad292a6c06d14b14fcb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-violet-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ac1feeba8879a8b0966dd72f4c8d85fd73ddfcbec4bed1d55dbd2f6a2da3c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense-olive-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02656cceb4e7ac01cccd5f7f32289d5e16a49c1b8bc908aaa45b22a06f90fc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern-amaranth-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d915a045bf2eb60d8439b9e870b610aec56232db06f90092cf835d0c3362757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139129 Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...