MAL-2025-149516 Malicious code in winston-nodemon-electron-builder-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd4fc533ec723fb7ba42bc781479f72f08c672242f24a09e80136673b1b2b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147018 Malicious code in radiant-perseus-betelgeuse-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efda70048ed2933a54a646b0cd38e0b1e034822156a10da273d06a2de20ffe7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139456 Malicious code in antd-google-hydra-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d85f40c521d390c13055ac239cfb90c2232db83fd4b38f76c3648973e735190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148836 Malicious code in typeorm-astro-playwright-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a388134699a0099cb8b9a6142715bbb20b355af053a8fab1eda0024013b36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147477 Malicious code in rocket-phoebe-phoebe-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abb6f55dac5ef11374f9fa96c5771d9ecc7f08d9a77248e89188838c71138a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149267 Malicious code in warp-dagda-antd-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264c22b5aaf174fd3e7207d8c30036247f754b17db2f75f89a85ca62322bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144155 Malicious code in kaus-socketio-blaze-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271214cea16cd84986d48c937872fb750393b1a48276a7270a1c97950bf70f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145679 Malicious code in npm-helios-nuxtjs-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d011b06489abe320d03829c7aeb72ebc9c37f4a034533c6bde985f438dae83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142796 Malicious code in galaxy-vuetify-kaus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2033820f97f916e773d13ef8133bfd0610ebcff696815f0c5eb8325a51bf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148981 Malicious code in unuk-iota-zenith-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e56bc422e3d5af1f932c29027347816b28ec50423965deddde8abf2c54ce8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149006 Malicious code in upgrade-centauri-query-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b3af104c42cd1e6c28d871a3de3cda443af276c5ae82679a43424867c39f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147126 Malicious code in registry-firebase-command-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46f43b2202cbe2a8592e3b893efb2582549b714f2c71fcf8dc94508d348bae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-fork-redis-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7330231bd4ca11a5cda133e886e1e711021f7dc403545ca5b0527970ceeb58b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142137 Malicious code in equinox-terser-webpack-plugin-dione-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5d0a52fb179fed091ca0bfd6b0a8636b4182eb536376574927473e64771fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140155 Malicious code in buffer-config-miranda-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2428e49d1c1fa813040f32afcbdb8c8455d25a0b20ba9ebfbd4c1c5e900c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148851 Malicious code in typeorm-mui-scripts-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000646b77a1119bbb3b3a76c92c2217a75d9894c9eb5228d4cf33b492d0e2e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140695 Malicious code in chariklo-dorado-ganymede-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84db3f327225b1c944bb3fadcbb5ecafcfe89a049123bfc6afb6d2351171f212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147352 Malicious code in rest-hyperion-json-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6808f6a254b6e4a43f70509201c590015d6715ac53b65322f9fb07b352c7f016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146841 Malicious code in pulsar-quito-standard-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac7c67bdb9d75c8e52475a01bcf3c355fc48b9d404756db73080de59a1c46ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141907 Malicious code in electron-builder-leda-astro-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66f13bb1ee8af20bc55eee9c56fa3ad914ff33aea7d902a57b02f6c1cc34ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...