MAL-2025-143206 Malicious code in heka-jsonp-triton-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4442839a576bde6f5711839aebc86fbf239039a98fb50a343307fadc3dcc0e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139897 Malicious code in backend-venus-server-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d008aa9a3805893a743ea6743370aa37617a06e73ea348356ef209c9bf106a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139454 Malicious code in antd-ganymede-iota-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496bcf3109d8c85191508e3681cd2e838bf5b6ed5a4cbe95dd8f4f484a420c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149020 Malicious code in upgrade-miranda-protractor-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a111ac67a7016d75f014c72b9786ce5661bc1d1508fb5ac8b3dff5ed5eb70e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144149 Malicious code in kaus-materialize-eridanus-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34083db92ffbd27d8e4a3df58007e7b9897495757cd1ef90383e6b19ca1a22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141975 Malicious code in element-ui-nestjs-draco-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d3d5af2f7340132e6fed6f2da3b621668536b4d11f2c9d5b05065138ad0780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141802 Malicious code in duplex-andromeda-xanthus-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a4bd8d58e794be3d15039990dda69c9d3e45aa26ebd1e2ba5afeffaa379e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142179 Malicious code in eris-postcss-meissa-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27bcabfaaa9e19e794765c57eb2a14c626c0f10f9a9c0753116c47fdae89bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146095 Malicious code in perseus-loop-equinox-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c15455fc23e56cc25186b74d796a66dc7b8c99617e33a2e861abadcb052f49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142468 Malicious code in figures-halley-cygnus-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bfdd47cd57e9ec30a9e0daefae6dced0d48b8bcdec9c70ebcd41b4bf6f3247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141464 Malicious code in dagda-castor-xo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144264 Malicious code in leda-convict-commitizen-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed8d2bd7bc5314ec5274d837a577d0e748ae44450cc9db11d1fb8e7a98b1224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141166 Malicious code in corvus-readable-cluster-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c703b164d6f08800f2448b0ab59f117eaa082c46ca937563ffc6be031c94526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139871 Malicious code in babel-react-bootstrap-cache-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07bcd268303bb5427b2d483a7bc87f4715738e050d7414c8569c27ef5e1245c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140052 Malicious code in blitz-nodejs-postcss-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45892fb45c9f93ca8fd5b90a65388042f2205a48413aa509a34733d2c1d972cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145771 Malicious code in octans-hyperion-callback-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9bce75854fa458672be683b1b833a43e8d11c30a04fad9829b766196694d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145598 Malicious code in nodemon-thuban-child-process-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3f1b19c53e089c5c8f230f49854000efa6afdd1b8db9e5f890dca0b7f5e9ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140679 Malicious code in changelog-protractor-bunyan-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8d924d423f039c7a3fe6145082b38e7501a3ff931d7a0e79bce1d9b18c274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148697 Malicious code in titan-venus-iota-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a805c600afde8818b0e2e52cf4d91aae02df504a12beb8cc8d54071c3139ba43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-lynx-astro-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd46b3c1de7c1784a8817620ce930feb00336a3a0fe9bc8c24e890ad623ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...