MAL-2025-143635 Malicious code in init-writable-pino-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f50d36da15c6cb7b0847c738d99b99be6ee6f7075fc0743fe3b6719e1d23e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148276 Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140027 Malicious code in blaze-octans-morgan-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed417cc989bb819c19d7843d0753a518ecce21e3afdfbcb40d467b157cbf301d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141299 Malicious code in csrf-winston-koa-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f85b9854a02f42fca44b893a5888ad42de58c0c48b4f4c21de2c867fe7a5bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149186 Malicious code in vortex-octans-adonis-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4832831988a84233762d969fc55c8a6d390648259d338d79c3a6ae09efd58d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139947 Malicious code in bellatrix-oberon-halley-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af62a0e9726a0d93c7beb487a2175fd6dd836c21b6b0fb9b04a2bc42bd7fe599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146215 Malicious code in pino-cz-conventional-changelog-sass-loader-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344b9249cda2bc46ac84d6f3e4f087d1f9b8fd5e514da9218c25f6cea354f194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147433 Malicious code in rigel-lint-orbit-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38cdb45ce2c006f7a290eeaa9ebd89179a65844456fe247adb34b597f3473af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142735 Malicious code in fusion-indus-atlas-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe29767c5b6d5ab886cefe4d1c91bde80862347523e6d222ef5f2302785b50af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149346 Malicious code in webdriver-mocha-deneb-transform-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150ea790515c59425cfe2071317b21fe51c70785ca2b2d6723de40588ca26b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145230 Malicious code in mutation-rehype-semantic-ui-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63b37a2968b52d30a65cffb26b3cb03a9d59890b2e68c2fc5d0da907d08f082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145062 Malicious code in miranda-umbriel-jasmine-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586dd2d29d903fab061c45f82a7e5906d9366bb1708107c946f9cd6446b3b48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141867 Malicious code in elara-celeste-unuk-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224c7375ba8187319a69a0db35e2cb1ee4fcd46fa4536d4633fa4f99f79a0254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142696 Malicious code in framework-wolf-yaml-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5171dda2e66d0c63bc03ea95d0b716b25ed5c71b006bc563842e12f1b9b6ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140475 Malicious code in cassini-repository-miranda-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9994289f1b06224486a425bfaa67a7547e6b44511dfb090b75b18603974c835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148484 Malicious code in taurus-weywot-zenobia-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542d620ec307287a2edecb637cf7d0cc4db339f51baa18744193fc284ddb2748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142362 Malicious code in exec-thuban-farout-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146610 Malicious code in procyon-perseus-hermes-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bacb0d3293d40ff90d010115ce5b01cd474c2a6af9cfa35aca2abab004ae82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145633 Malicious code in norma-aether-thuban-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34926fe5717955e2b3719df604136815a0cd579c4e9b0a766baed82f8f5dbccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146297 Malicious code in pm2-eleventy-google-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51d1f7de0e0269af708961d18f2d108d52be80609f5536d347cfb63070de448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...