MAL-2025-141114 Malicious code in cors-antares-commitlint-config-angular-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65e5b472bad4d63da0737aa8f5c719df563456c73b01cfda2fccc25d6db55f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146895 Malicious code in quantum-avior-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149470 Malicious code in wezen-spawn-oberon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5ee2abc458f3a13891087a3f60389332785b5b51eebc48a7cda288b973970d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148079 Malicious code in solis-meteor-element-ui-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07d08f7bd181bf65426ca17d197be99b4431f0b0e6855e93f84eadb534b053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145352 Malicious code in neptune-aurora-backend-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfb10cac4b5a1dfb6a498b2742fde2ada9966efaa48a9f65f9142d0b3af950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140064 Malicious code in blitz-thuban-mongoose-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a38b52da158ae13c533abaa878bd0546783bdc722f4e37c25cb1f7735c7199a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147252 Malicious code in remark-mensa-publish-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 003577839990280047a1046223cb273300b3f2619f3543ae9904c38dd6fd630b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-altair-commitlint-config-angular-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c16de385d262c74c14cb8a9c647ea883875717271b69fd0efb991c16a3679a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-koa-cross-env-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873d88c3509404f2988cf91d1771157fbd0b4779809b331cd37a8c05f53e5239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-quasar-hermes-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652e2d076c3ee69316f7b51ec59ecd9c44accaccb4af2c046cfab5c66c5133e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-warp-gridsome-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91a7f62068f0a585e503506bf772da51aee6b14209f21c8d75739764856b854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c08012984ec3c311cb9324d108ac55bb472151dce64bbcee684c95fd2696032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139101 Malicious code in vishalgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b054b1f9806698cae3c70421a3f51632847d10f2bd35cdecf13096eef910d19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-tomato-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2462fd88d4f1162ad5132b0522ddf2ef308fc517f82d6c57d133033fe46983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138657 Malicious code in difficult-ivory-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7665fd0ac01dbc5b0e30438213d33571666429d81072b9a2afeda4379d5a48b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected-amaranth-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba61537ed8c5d8d3fe781e8c3ba1e4f33461ce56bce9f259eec377f198d7029a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138650 Malicious code in delicious-lavender-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0131293d35046821d32bd9db2f803ed8970d7205b188041479d1b9b995e7e6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-lutis76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f029da9ba8b9539ecfdfbe35533b3abe01f6ac85d4b8d3fd25b1040fee168c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-nasi3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc26c781b00a6f14813066e8847887791e3ab9c6b1048aa8da9b919431be49e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-brengkes52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a84426f38b4261789a22d198bc29abd41f1b965debc168577bd1979ce2fd563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...