MAL-2025-144487 Malicious code in local-galaxy-css-loader-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c5d995b2d7c1379c608222f6a930f1dd0abf83465e12d9acd14b9ec66aedfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143646 Malicious code in inquirer-duplex-process-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915e7cbf95b48a2c8efed1a02fed0f77e49a42ae939fae8791389eff9a7ab0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142627 Malicious code in fornax-iota-protractor-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df350d081c57b71749f2c728f47c73a9d2b08448b1ac30cd02ee910c3ebb0e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146086 Malicious code in perseus-figures-gemini-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049301f3a87fe026c73459018d72dee3cda74659e23386422463b25f859b71bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145029 Malicious code in miranda-dotenv-parse-variables-middleware-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbc13dda52cce500456ae68796660af748d0bb9d8b77d1273e8d13427b21b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141696 Malicious code in dorado-protractor-ariel-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13fd03154d71a25bfffd817c62d2ed9b024434ce213d48112596407a8e63926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139667 Malicious code in atlas-virgo-mui-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce18b52cd687aca9cc61151548e7c77706281e6cc27adce28056eb1378cde57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140389 Malicious code in capella-hexo-subscription-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2105b8bd28c6efe0d62e14f7c0a60d2d3e0e8df12dba421dfdcfa60299bea723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139161 Malicious code in vivid_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d702e3993e606ef0aef4050ed75aeca79c7282645c6bb316ac21584d17d13a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware-black-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93110aaf098d52d787512c3c81f3d40b8d4d47faf9aa46ed8672588e2f65f08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-turquoise-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b937be270c79253db89f470f116f0c0e4e74708349b3993b81719979afc47da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138775 Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139007 Malicious code in silly-ivory-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9f2f9084c87b42668326fd4ab3ff0f5546bea3bf332375c670ee4a9e993c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138631 Malicious code in confidential-brown-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5359559db4b2d77ca1c9ffc0a98c94009fa787d18e244af3dd3cffd9d98d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthy-jade-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31bd5df29163f4d889f5da4040e827be2c0860a9fd694b9b073b92005cfffbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy-silver-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa82b813c7e2f7ff59f68cfbde294487ed049675eeee4ba335438e9bff54088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful-olive-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881decd5f2d5a8e3639665520cca8495ff5fd66a9d7e634181d480ff32a518b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-sapphire-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194c6713bf51b1df163945ba00c5303080b05490fb1610399ceef7639e574369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138586 Malicious code in alright-jade-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7469f2a081d9b88657ecc464dd738f41968414e838c4721031fd172da2e3154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139089 Malicious code in unknown-white-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb81dd3f6a1c64968e6d832222379c22d81a0d68cdbb8d92aee62cd51375d7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...