MAL-2025-144417 Malicious code in link-ora-gatsby-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2cbba5177f393474a7266a1fbf0f8ee23ba7cb420d9d2f5792a280484e1655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139426 Malicious code in antares-nuxtjs-xanadu-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f174f64eaf238a88acf650289df7e20113ffb2c14d336a40eefe4f53d6f3d4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-chalk-rate-limiter-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16bbf56c33e1c969c874d1a9534c05a591a456bf9708031149daceb8627a3044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144506 Malicious code in loglevel-cross-env-exec-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e94b7d7cab06bdad4b51a0677f1d821f7d50928c6d6eda557a6e75f8ad54714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-cache-dactyl-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c89e45b27de330b847c8bce6f45bfee848d5d30bb49965b5d63299d0e86ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-hydra-test-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c07e9826c7bcfe2f3fba90971dfc109aa47a799c8079f02becdfdaea244b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-sqlite-betelgeuse-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc60883362f96ce17af77f42c511cdc772ed4ff9c97acf2447b1547435cb5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-pm2-ceres-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf871a4877a3996129929de380f4c025915ab6280a12ca4aa41a9543b269d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139710 Malicious code in aurora-run-script-ophiuchus-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241691cf5bdd46c9383783776eb754470cc879fa8b4b29a106fb767123215e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142251 Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-barnard-commitlint-config-angular-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e30834aa54b97707b8f7c9bde05d8df1b16e3072c88cc6cd8726db3cc519bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-xerxes-deimos-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58244559fbbee2ea59e05e1acb575ed0ce8db9e247dd3b432925e94666a5907c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-event-lynx-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b31d097f97b245a36810ad6bb745e92e23442c4ff914b6c5a8a2b4a1438923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147735 Malicious code in scripts-loop-zephyr-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d858326367fb5a479f89e8a5c5167fcd21703e0e73a9fad660ddd332f1f78c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146223 Malicious code in pino-meissa-izar-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f4f35d77fd9a52a0e902f6c0cc3434a805974cf10624cc7cd084a5eecaf839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145186 Malicious code in morgan-regulus-xenon-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b88c30f23ade6e1415484a7e9c1f68a5da86de1d452c1653f5cba3405c60358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143136 Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145879 Malicious code in ora-dotenv-safe-nodemon-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f5ae1a3c4741db4980aa3500c4358afd09c3b49bde668079c555bd0fe85862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144586 Malicious code in luna-ultra-fetch-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00ed8cbc51d9cd205cf472188ea84f2ab444b56ddf9af825ca395be404fd4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146765 Malicious code in public-passport-event-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bf8003ea6e13f7738d4e65e37de9cd73ca9fb6ca0cc7bb83f4a2ba932a3f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...