MAL-2025-143166 Malicious code in halley-semantic-ui-proxima-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6f4cd0746ba42cd6e48559c37cd5c225b99bf94116ae4eca429538f9bd221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147234 Malicious code in release-it-release-it-semantic-ui-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cd1c8bcdbc0ec6726484d622ff13395ffdefd0f82bf15de112474aae255b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139978 Malicious code in betelgeuse-eslint-plugin-socketio-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe0ed93a195f1e90b9597a17f9ae38aa7a191ea284524761064ec0713b9439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141193 Malicious code in cosmiconfig-prettier-plugin-markdown-yonder-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e91001c644db002183bc0aa1ace65a08d0aeedd08ade3f1f02ec3174c2c80f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139981 Malicious code in betelgeuse-fornax-europa-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12df85e55e17f239ecb02ac68f2e4aeb2274a82da624b7659364d84ea6c5165d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145612 Malicious code in non-blocking-kastra-eslint-config-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6733a63686f84a737c0a759a95d9448142cd5dc89513c785f1f746ab028b97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140568 Malicious code in ceres-hydra-rocket-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e19fe3509407b837afe1cba9748d532e71518ada637a85b02b82a2f65b2abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-auth0-xo-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b26664e016b9ce769434fbfbbce3b3a7ed799f42d2c8b2848fda3fa7fc2cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-sirius-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaf14e6e10cbe5a3b607dee0e7b57551519225a5dc3ef21ead34231d78cbdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-morgan-gatsby-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554139500406b867d6abc54a5cdd58fd294ec3edad56fdbbece0f3987411862d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138862 Malicious code in mature-magenta-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de26faa67ad04b9425d716aec4c78ec2e19bea135d36c63fba463a0075d6c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-teal-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac3cb5d867a1c5335e2448f597f0c48d03822b24c98e92b0d7bc9a50430d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact-gold-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd089cb204e640c0a045dbc093fed6b80b99038102a240a1b691c1be42922408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-black-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12317131eeefab57a8a0ef18143ae04c2c9866ff86e5d5ceca767ab54a9015cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible-bronze-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478321554144be69d7f8d6708d8b4a9e4a22186aeb47f821a209a9b0a9a7d4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0147cc8e85c7644f79f2798108348b58b311fbc0a65a9bdab017e21fc2a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-taiwan40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094922c939d2c8ef51630569e3f6823980fd60d01f1c3ecf758bf62a3ca6e7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-tapai60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f55f176c02e6dd30b7538cb3abd4514d2802de944aa32d0532a6d533866e2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133357 Malicious code in fajar-kacang35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0c43a60efb5428e91433f5ccc5b1fdff4c1af8bd5616d6b486175050e0c0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ikan86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cf99f195eb0ddc1a9cc1bcfa34f11268aae01d87a89cd8103beba985b662fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...