MAL-2025-144321 Malicious code in less-loader-hercules-phoenix-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2202e59bc8b6eb663179fec4b52bcb54fe06b2a33c3a4cf3344a08f559886c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143407 Malicious code in hugo-transport-node-config-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9423feda132f6fc399753b25257e55a7b21305d3123c15d455b262af1712ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145129 Malicious code in mongodb-grus-despina-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb803ca4e42703dfb4576e1d080b3184c952880975f29de14f49945a4552af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145911 Malicious code in orbit-pegasus-sync-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79082f20d6e936580e8dfe2211f2b6e53ef751c257ff9d6471bfbb874308adcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144920 Malicious code in meteor-nconf-eslint-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84948bc210386a5b857b2b24ef3adafec9119d50af5819c80d629368dcced93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140366 Malicious code in canopus-nova-dotenv-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394ee31a86cb9f498b7f9ad32a3105ce4c906477999c9677d623111b27a5bfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146448 Malicious code in postgres-spawn-rigel-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddf7080a771b3096a15085cdf691d55cb0be498d1dcfe9ddc2d397f6684c11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139712 Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-browserify-callback-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c864ab0f3ea20a6a763e34b88d57a3110cef1948b43a3c1c9f9b6cbaebab520c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-changelog-cosmiconfig-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84d9ea7b954795a472da77c59e5779afe513ebabc579db3051c8ccb635e1150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-fornax-centaurus-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f30755572e37c868fe80982adf7e0e1b3a3c84d267e86cf691003fcaaba7c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-husky-meissa-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e0ad3e15e523571fffe4dde2372141a4ebde58c26b4302b395220c7bd8915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-levels-supervisor-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868c0994e06637ba64441e54a1fc3ecde4cc85b778c560660eb4a41245168495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-gatsby-figures-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861fb5329fb77e004899efaba3a94f1383f864ba21060609716072f58bf494ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-meteor-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade6f541b404705505f9e2dcfc83465bea3aef4ee1280d3246806fdd04db9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-jest-oberon-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9588f90e10bf64967aa7f309ba0dcf4a06281c54f1ea051fd212c29556caaadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-jupiter-writable-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca3ce2a7f57e4a4c5d993b8e33302ae1c04773f290a3bb65bd819552cce3b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147347 Malicious code in rest-exec-graphql-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e058454b52ff02631b84926bf7b5588d9d267001a3788c2702b7fbac6398f356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-commitlint-galaxy-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8d865c713f0bfad46c9192deb53efc6b0e50650c66cadd892196d27b5ffab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-miranda-await-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2d6d49bf547d156d487f81fe46c8cef48cc9384157384e01f1f52036de4da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...