MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141046 Malicious code in configstore-callback-redis-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc902eedfefad70cb1e53bff07d347343986663b7e4cf05ee0bedb6d0f578343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140038 Malicious code in blitz-cosmiconfig-google-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde950127da342b2375027506ab6050f96edbff872c390936286f2f3ee67fa03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141784 Malicious code in dotenv-solis-hydra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204e4c944e5588742767a5571cfc83804f233a9273e1e095b54ca7a84a00cae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139841 Malicious code in axios-thuban-eslint-plugin-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8a4f3e23670bbf493f18b8c5c2ef9d2b11ab2ab82c4a82ebb877c44b82bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148227 Malicious code in sqlite-ganymede-jovian-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e769bd671055035cea71893fdb0a3a7e4aa2012e5d37a9d0e0f609d74b13e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139139 Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rough_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19108e27330f7983ea1c58606bfe8b88286db86f41acf90b79117985b4756a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02bcf6bc040b83ba7e5e10df0a1bf19605012adf3ca501bb8edb7401b82ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview @acitons/artifact is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139038 Malicious code in static-red-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a62f8b52870a99829604b5d8e9dec5ec65b122e1e9689702a7625a69dc329e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in then-gray-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0d9320f06984d3fb3a62debbf4c5402a26f333fcda6f7141ba558cd7a2a354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139065 Malicious code in technical-rose-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79756f833eb7b85846ecd66b15a72b2513b4a28a53a3e54df116a02efbeb293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138804 Malicious code in innovative-lavender-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec72f5bfba30e96c51554845c6a26c1f998f5349a550828d2379a1dbe7b91675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138581 Malicious code in adequate-purple-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df65d9ed90c6b0e40b3541d480b9b1ba126f97ee1c1a5ff0683824c7d064fa45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138903 Malicious code in nutty-emerald-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0fa4900235fb6f238809419cd02afa43297d01c65ffd16ba7c6e7afe2b43ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-tomato-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286c81453c169eb334dd954a990db761b5fe48b124e4132b65092030af1cf1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful-aquamarine-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5352403d2c82ea93e9612c7592d466b84ba466cd6f4bc1dadbc563994fead63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...