MAL-2025-143437 Malicious code in hydra-canopus-subscription-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b87c7c825a2db18e8c130977e889b347093d1698c32df204faa36afa5165c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147885 Malicious code in sequelize-webpack-electron-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c6cef0d1f5fa1940739aefd12c411b829bbad3d9b0e3e28cb1c8356f08516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140436 Malicious code in carpo-cors-react-bootstrap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d871110fa02601bd5617e3520de63bfc553c86eda11a0f3a7140b61843da2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147781 Malicious code in sedna-parcel-css-loader-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b20fdeac58083ea4dc8ac0159ee633ef660eb39bd5b22367ef4442d9424b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142851 Malicious code in gatsby-registry-quantum-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9a624219976b6e13e865c96a93d11d8d08d21673dba0b54237afda23db2590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143199 Malicious code in hapi-winston-halley-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142057 Malicious code in enif-process-solis-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81fb04bcea4a8b7f567c428a1b8277e106192d7f691cc2f60171e7753ebf99ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146471 Malicious code in prettier-nightwatch-request-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae148927e5d7b7502bad537bf67cebc1408a2573a7de2260fdf5b06c39e274e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149105 Malicious code in venus-centaurus-meteor-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e2a7081640c6d00cd3721b0816361c409eb82efad2b5cdab73e585d1ee971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147784 Malicious code in sedna-pegasus-graphql-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba74f15a1ec971342125b46b02655ae8d84ff85e5b0090ebee93b6711e752b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146592 Malicious code in procyon-flare-webpack-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11acf55bc832c93609862701d1953f0dd94b37222af62dbaabe0a8227b69ad1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148456 Malicious code in tailwindcss-style-loader-corvus-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dda3cbdf0ad64d11cf806ebe3a954d387a100ad64aff35dfb9ca17fcb04b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141272 Malicious code in cross-env-semantic-ui-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d430064a3f2838ee485b692085966c87a656a847987e105921afff07be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143553 Malicious code in impulse-rimraf-schema-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f086d7a0bdd974da91e3776911c36ba418c661bbf2f3d9fb1a50f0ca0daa4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139655 Malicious code in atlas-radiant-sirius-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693785909b6a2f6ec0efded6f239ca9b5178f141954c0652b3b1996fdf9303b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139538 Malicious code in aquarius-jwt-bulma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6563a0cc256be828325c533ef3b8a3fa946a92f767374fdfd71f591644edea79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143233 Malicious code in helios-grus-morgan-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cf6eb17521dfa305a33e0990d686800f538681feeae23d261273fa6889f5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146512 Malicious code in prettier-stylelint-nashira-start-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ebd32b4bf8b3a577c8241ab5654cc0cbfc3b39f81ee7cffe476b70f977a77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-rollup-plugin-vuetify-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25cfe748bbdae6caba66a493bc7b808107e36ada1c4f2a6279623281fcff361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...