MAL-2025-143095 Malicious code in grus-nashira-lint-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d055b3ce56e60be0bfa4969d7cc1a5e2ffb608a61cdf2cbdfd339fefa11ed75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146821 Malicious code in publish-vuetify-deimos-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d89e84ba3999cf4d7d7762e710987dfa5c78b6051344f073b857dc382f4fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143084 Malicious code in grus-barnard-algol-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a41843bb97afd8f42d65fdb530b4f04cdbf9e62375b7e006bad94d857d4c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143592 Malicious code in ini-lynx-triton-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad36a83db4c18f6d235decadf06c6c601b0f3aa88ea21b13a2cc6f1809ea172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148138 Malicious code in spectron-webdriver-restart-cluster-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c417cff21456035f8c3ced2baa3c4dadbdc2048dfdb5510a34bfe0d3ee045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142688 Malicious code in framework-nuxtjs-sedna-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5259e841b741ad81487bbaa050e3336e687c0db66022001ceb0831d8feb00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146633 Malicious code in promise-bellatrix-helios-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2bc2261e80b41b4ab426dc70dd2937838890d8d5ea543a3819a37e3e44e920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148368 Malicious code in subscription-wolf-celeste-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365e44d466f6d5e0d49f8b799d76aad793d40479391043c1ea5114d5913e01fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147030 Malicious code in rate-limiter-babel-package-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c012dab347c3e3e7f352b84d6995cf56ed90b0ff646e3e3fcdaa6e351c7310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143806 Malicious code in janus-elara-draco-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d02531fca99bec533cae3ffbff32de807805bb87a92ebfd783d35ddf8013a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-node-sass-kastra-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03389f3a7bdd7c333dc10a664884142a887b5dfa396f74e0d333e8b182335600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-ophiuchus-geckodriver-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e4f53634cea23556bea1344a177ec712d1d78848b4400a020b38ce80df66d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-server-ini-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5d0360722cdc73ccb7eac133b17b09cfa918f7f0436c2a0cfa464bd4b5a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-lint-staged-nebula-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f90e24f78db58b9fff6195aa59ba8057d8a2f471f79ef9eb526355fbcfc2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-chalk-warp-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c68d77b2e4bd7da1bdfd033d264b648eddcfa07a88b91b57c2db7dfc573149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-auth-xanthus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68cc5375476c81c36c83cc97476d3cee652e85e96e6b4b8bc0d89151dce75e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-elara-buffer-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3619655a017bf4695cad82d92475a15b8cbe18526c299bc7e44b636e1a5c80dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-loglevel-unuk-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88125d1d338fcaee6bfa1402fb1a2d92a627235f0690f320d829c9393693838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-warp-carpo-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef0aa9f96763aefd511c2e6daea8c00dbcc1312a8985e4638d5c11873a0dee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-config-miranda-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2428e49d1c1fa813040f32afcbdb8c8455d25a0b20ba9ebfbd4c1c5e900c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...