MAL-2025-144085 Malicious code in jwt-semantic-ui-nuxtjs-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce61a1544c50500c9f832240d3b153ca30544b6968fd92fff24c6576d0beeb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146565 Malicious code in process-radiant-frontend-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ae85598099fed261ece31e21b8ded0a3b2032ef48793745a4f6db01c8c0470b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149832 Malicious code in yonder-child-process-writable-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71630d74ef3a2db09852db5443aac9a0a99d34b52adf3fe42b07043fe9a736b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149091 Malicious code in vega-io-prettier-stylelint-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdba254f331a198ad29d4f9ac5c0b302bbe4413db07312639d2a4882d8bc2c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140512 Malicious code in celeste-loop-nightwatch-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8831623cd3ce919a2e1cf64530b543fce464aaf11766e4316e23d373c57b103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-celeste-unuk-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224c7375ba8187319a69a0db35e2cb1ee4fcd46fa4536d4633fa4f99f79a0254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-framework-taurus-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca5c47a0b91aef35c306426d598941c157a29b968536ca1515fea6acd250949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-pavo-barnard-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c60fb41ebbaf22e751bb38346303fce0e6f2ea2eb0e75b6a3e91c73e8781911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-yakutsk-juno-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7d8857f1269646d020d61a230349856e619bec10f9307c2ab5843d8f509f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148263 Malicious code in start-backend-delphinus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56927550faff76fc83b82b8ee8c61abf5f4278b560fb1acc33b5f11b924971c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142975 Malicious code in got-aurora-altair-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d68a0461ad4916502c60d7cd2211f6b03c381ea1d81803a7a2a11aeaddc820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144281 Malicious code in leda-miranda-oberon-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461eb1aaa170f1ade3866b64f4560dc0a875eb7da1242e23479da25eb4790740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142426 Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141416 Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7bd00c7ac28604a872f9aec913094464d5a6717e2f388f33e390d88a8f4360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144875 Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-colors-aquarius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911081cb46abd2de21389ef7af5d7911dec4ce37cd1ff6eec6f1cd82585dcc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144065 Malicious code in jupiter-tailwindcss-unuk-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6604a27476f8c7705bc350f742b566022ef6f23c269b2a748a8f7204e54f0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaphahitqq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22bfac3a31bf85f77f63ac2d1004c7779f42692ccc4b5f0f31474282377192d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-forever-nestjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1406fa4bd80fa829b6a7321e56951c0d3568b801f7775b62e7a21d9f256495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6116a38ab2e392b9841b501586a3f93c8ecb5457593cd69dd4d601275c119002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...