MAL-2025-139279 Malicious code in aldebaran-grunt-cross-env-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942dc7567872d64db37f4d53372787e9b8e5a11a4ea0f476f650bc9815625904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140720 Malicious code in charon-csv-development-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e003bff80fbb2c9adfc58b7b1d2c7c219da1fa8d285b269248e4b07db64caf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145568 Malicious code in nodejs-io-jwt-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78bd8f68e5084582ae008ffbde3628c1d8c5c11ab6dadaa29d7b0c2179fa3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144030 Malicious code in juno-loopback-tailwindcss-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ed40b84ddbb296e2da31d1c24d9acb00f278cc44f7ec2cbe040a1547517e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144953 Malicious code in middleware-electron-builder-arcturus-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0a89d2d72c450e8537ac1c28fde5acfb85995789697e16a6b4793a011ce5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139684 Malicious code in auriga-nightwatch-yakutsk-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35fa65ea2bd4d530b030637bffe1acb3dca16c267a6fd9f1f510158073ab3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140945 Malicious code in commitizen-terser-hugo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2b8214a60a662a80a0f0137d8ca285913123c2808845be9f6d435e37b6af45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-loopback-dactyl-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e705ee7641022af9a53f63bfdadeb16861e696f1ed1e6802ad91b6726cc24e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147445 Malicious code in rimraf-canopus-promise-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff23d07545c6bf65617bc3e8cda0cc53db851598795f0b98762db3ff60fef82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143958 Malicious code in jovian-proxima-dotenv-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6733db5f8deed25a8509ca2236434c17eb704c35183af720bcaca605fcabeb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148530 Malicious code in terser-meteor-element-ui-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41505bb8f06c3abba6713e2918cde0849952204503e238e0d3620e4f58c5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-less-janus-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9d6033619dd075c66d22a2b5e6f8dff5062b06e279df511f1244751d71c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-socketio-envconfig-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebedcdc5ce974e9a83ff75820bcf48fe3fb997ee0bbc3c3096bcffbe5d10246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149705 Malicious code in xerxes-foundation-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e106167988c40bc173f487701891303d610d3df571fc17138b7208a32f46b453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139392 Malicious code in antares-auth-thuban-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c3046a640463c0c5ad0bbe94e2f92ee4bb4bdc71323242d72796c0d5abed32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144907 Malicious code in meteor-despina-octans-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae65bf00ffa8318ec13c12d88ff9a10b09717907e583c9ad2ba69fee6708f1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144836 Malicious code in meissa-superagent-nuxtjs-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de55d40cec053feab657e806de32600c5da394aa913402b5aeeafd0c320485f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141006 Malicious code in concurrently-fusion-init-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447a0dd14642fe214f74258e5f7c9daba2a84c171060af3d133f58a623b6e20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146055 Malicious code in pegasus-spinner-google-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbb62fe13e1ab017999008ae2b7f567d60822315eb71cda2bc05b0f3987ee87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140804 Malicious code in cli-node-config-eridanus-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c9e5f61f95bfcf4d2b38af3999e0c0645e84cb36f4d520d8df699b673e6970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...