MAL-2025-167385 Malicious code in teagood-nalikami112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9d33356f7e10e00d195f07ee31352580161f2f60348e80452a9578855d2891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157049 Malicious code in jelek-rasis-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf580b0d87536a4236be19db2b41e3e978c45a912e42be45ec97eb8cee703944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-betelgeuse-exec-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2154045e7fb54a083b9029a1dbd9999c466e2d28e5a016fdea509f93c03163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-hyperion-semantic-release-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf7059e4ac0020b941965c223d4c47377d71afc1a550f4172f95f30a36ac60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-pegasus-ganymede-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65afe8cfd85ae35917f7bd628db75ee6071d0dbee2b3c66a8420d9dcea9117b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-figures-epimetheus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d115db11723ac4106b180606d5b74d562213fec0a4d74dab35dcb1e712c776cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-axios-mongodb-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e173859d9255f417371855a249aef1961a30d39eda19f4b23ecc555ee150b732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-build-eris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906ce772c225466bc53a40615b5f32b6037636043160eb815b1653bf3675135e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147864 Malicious code in sequelize-deimos-cressida-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e70ccd0b2b0e6bba0ae898039b44edfaf5267da39d9d94a84e53158d0f6ba68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144305 Malicious code in less-arcturus-charon-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08baccd9d82c30e5e6c477d773783cfbd6d66f0cf6dca7d0451eda1e7cb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146143 Malicious code in phoebe-celeste-luna-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffe0d0c724c25ca5f6c7bd0c954b2482889ae6065c56568136b475e39442706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149298 Malicious code in wasat-public-commitlint-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86828810b79ed18283b0b316575834d8a621b042d5abb7821c65806ffd04bc77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148530 Malicious code in terser-meteor-element-ui-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41505bb8f06c3abba6713e2918cde0849952204503e238e0d3620e4f58c5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148300 Malicious code in stop-package-phenomic-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc099d38b27f19ea7c371913a1c7be9ca31b14fcc5d5c992ed20417fdc8eea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145827 Malicious code in ophiuchus-metalsmith-apollo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e7e51a83f23a65a177aa0973d2ad88d24a3da3dda667c7cf1f4228fbb52357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142288 Malicious code in europa-protractor-readable-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa112931e43f24bbfdf4a2b84e975c5dc4fb7573e88503849b1ec74e6da0a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147014 Malicious code in radiant-equinox-pm2-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfdbb60037d98cb4076c74dcd46b2323884f2253eb379e85db9ad413affc169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144836 Malicious code in meissa-superagent-nuxtjs-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de55d40cec053feab657e806de32600c5da394aa913402b5aeeafd0c320485f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...