MAL-2025-141065 Malicious code in configstore-sync-magellan-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b18e24cfb2651bff070b27848319246fe6b3896b86e773f8ebc1a878fbb6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-solis-grus-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1bdfdc7bb97c3e6f4552241ddd6ae1a7be05ef2b820b1547391c9765a70c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-lint-staged-toml-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fca59636e0d9c48154390c3820e7c28ac94635107dd709d00f284b720b8ab5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-mini-css-extract-plugin-test-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d47c46e0374aed5c5f7d4341c5a6a16c64a371572dcd61558df3ac91e327c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-bellatrix-cosmiconfig-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bfc0a9d123c2f0452947c5293ca68f12066d3aed35fc561a356882b87baba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-betelgeuse-relay-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcb555e3d60d4afc142c75c5e27a22f2263818400a0c623dba7c4630cdbf9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144355 Malicious code in levels-levels-ora-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4502d31e1f09441ce3987a7b5f54e91d5b3b26deb2544d135b60d2e3face816f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143554 Malicious code in impulse-sirius-quantum-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcbd3eae1e421d8d92fe92218e4640f6868cac6b4c7b6f72d8f3b60b2190e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149822 Malicious code in yildun-rehype-javascript-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7450993f2ee006c4a6d5bd8bc981fba7295d59c3471a8aabaecaeb1fe49589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140061 Malicious code in blitz-stream-less-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ecd86eaf3c1e82a40581f4cf468c1491ce380d9ddaee36e03324e2fcf1bfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140231 Malicious code in bulma-umbra-jwt-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b1e107a01795cb4e0333a5cd37929bfa63193200bef0f27be1199d84640f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146460 Malicious code in prettier-cassini-epimetheus-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4510bd0b51addc70473e7827c7fcf4350a02fe7cd9edaac4f156cf39bbc0852f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148079 Malicious code in solis-meteor-element-ui-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07d08f7bd181bf65426ca17d197be99b4431f0b0e6855e93f84eadb534b053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149548 Malicious code in wolf-enceladus-telesto-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84a7209ca76d3f75e1441dfa06b102101ecf201a5d0202b27c3ce4d1f243a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140512 Malicious code in celeste-loop-nightwatch-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8831623cd3ce919a2e1cf64530b543fce464aaf11766e4316e23d373c57b103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139503 Malicious code in apollo-cypress-hugo-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758c19faad9f0ce115ed507c1f4121e5682f2b0efd2245660fdbc2de7e4f9914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146895 Malicious code in quantum-avior-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140163 Malicious code in buffer-nodejs-native-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdfe7b627e6dbe13e573500c4bac8abb0660f48ef88bf69c58ce61ebef05e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144599 Malicious code in lynx-rollup-centaurus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591ec6229ab2705b8162f934c9e360700e809c8b16462a0ef13912f665240b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148932 Malicious code in umbra-phenomic-electron-builder-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424a9fc94db72e7f5a82ed92d95569357de700a247032fc96f8cdd8b81ec290d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...