MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139835 Malicious code in axios-non-blocking-concurrently-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236a8064fcbd236de61389dc51da3fda74c28886d8ef01b3e97db6cc6af42cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141533 Malicious code in deneb-betelgeuse-prettier-stylelint-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69150f9f33731a4330152efa49e47de700c1bd6c725073e76a1854194a83675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-cosmos-soap-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1ba368fddb4ebbcb5c479a5aeffb91aed8d9906574a5bdf14d47291ed1c503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-eleventy-start-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef5c3375e9382697062795f0b29e5fe5a516d4292590c3003a1e2eef900faa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142630 Malicious code in fornax-link-framework-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad198d91229350f652e4ae102f70d8e7ce49ce27bdf04e26787e9a03c241f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139713 Malicious code in aurora-upgrade-venus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951efc2b516ca82cd5789c5c2dc66c57bc2c3eb4310668eb2b8e0a6946021ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144881 Malicious code in metalsmith-jekyll-async-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae80eb5fe94ed880a1e30a8f4eca1187c053f73941d55412553cf556160de14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149040 Malicious code in ursa-apollo-mutation-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d42fff9341dcdab6e4009ac832a38be16bf5efd69f65c97d53955e9bbcd5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139747 Malicious code in auth0-forever-postgres-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b82056a31b43b01d8c289b59dd98b00ce4269e59a1eb05e83db7933f8f3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142182 Malicious code in eris-pyxis-draco-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c208b85d24de7d5be4b6de3acd5a387861ba181f46de1f1035b7f92b3461239b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144409 Malicious code in link-gravity-css-loader-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145670 Malicious code in nova-umbriel-axios-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a48b5da8558a447c6380d7ad1dd3f14468d26f6806f41b77ccf389e6b1ab712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141464 Malicious code in dagda-castor-xo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147389 Malicious code in restart-procyon-apollo-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42e3571477042a427ea800803cc8cce7743f22a2f72d8c43432ac8fd4a5c96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146845 Malicious code in pulsar-terser-publish-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3720a288da20adf950ef63d4d9940f4c6c2306532eaf5161886362bcc34b0f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142735 Malicious code in fusion-indus-atlas-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe29767c5b6d5ab886cefe4d1c91bde80862347523e6d222ef5f2302785b50af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140546 Malicious code in centaurus-kinetic-sirius-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50fcc30fa8139ed73af6f44bac4efde53a44deea5dd313e881996fb0bc85c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145211 Malicious code in mui-spectron-webdriver-csrf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b388329fa9ac1bde5371570b5087a75c2e9dfc2b68395330a04b891d67cdd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147557 Malicious code in sadr-async-rimraf-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458c850dbe9760289c925af204c42236df3c66d869ff1da15a02801831c8f9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...