MAL-2025-145273 Malicious code in nashira-farout-sass-loader-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d9425595d1a523a7abe4f4f6cb677814185a26cbbe69eb2ba49c417075590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143016 Malicious code in gravity-arcturus-auriga-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e16402638aeed0613b6f982c6a3151ec789269a707550d1762c4eb988453a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141933 Malicious code in electron-soap-magellan-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52ccd77b3d326b562717c132e5824267c56c44d0c2fec12ffdbd096976b6ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142696 Malicious code in framework-wolf-yaml-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5171dda2e66d0c63bc03ea95d0b716b25ed5c71b006bc563842e12f1b9b6ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140290 Malicious code in cache-xo-ini-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e218cef6ae3a02747d8688df10e4dcef93e1bf188d5dba1a9af3d41f478cca01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148229 Malicious code in sqlite-iota-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344171a165d0c3e2a68c971568f883679677b8f5082569c0d17202313d2518d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144726 Malicious code in markdownlint-procyon-magellan-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3737458ecbcf5f4a72d484af71c52ba0eee6232f96af3f035d50de5dddbca906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143791 Malicious code in jabbah-spectron-webdriver-procyon-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1135c573e6af1a5857f5370756b236e890589ee9f51d736363bb5287226b1f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141609 Malicious code in despina-standard-sagitta-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8b128c16f6b38c7b05d3ab353887054659ab8b044b6ec98883887ecdf90940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144219 Malicious code in kronos-grunt-sadr-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77e858e6d1a107decdeeaae11b5f3cac7d091cbd8cf3627ffeb3de7918adf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144198 Malicious code in koa-odin-aquarius-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5224286352a2ba1a1be9265f826fd979201b470b0eadf7543fa1921604f6f120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143012 Malicious code in graphql-virgo-prettier-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf0c2ff36e58cc35243ac8e68be82032aa3e1c00c0ac502474a893c01758736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139395 Malicious code in antares-castor-yonder-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d988bdba1d2463dac031e9b4361d5cf5f8e29905aa4c542b324e6cfe05c62bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145395 Malicious code in nestjs-fork-draco-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c955d990db2c8b50291158cda63b6a0c64616f530042044ca39f552cee4010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148367 Malicious code in subscription-test-protractor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1172938e85e672a705c123845243e3c77d61349e623171947cf7b653919b6587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142983 Malicious code in got-quark-charon-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2791fdb726654cfab79699ec9ea9331cf5f86011d5e2d08bda7ac54d9a50486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140502 Malicious code in celeste-astro-corvus-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58e3d277cff82825e0b421686cf2246c1d36a3d87e8248f7367a29975591f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147542 Malicious code in run-script-eclipse-library-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba95ca976be0c959429a9d1c12a3807c824cad259d8fec7ec0d2aa123e97b477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147088 Malicious code in readable-pino-loop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b3b852e1f3038c98d784c5e0f10bcd609953ec9ebb113fca071dff047de237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145230 Malicious code in mutation-rehype-semantic-ui-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63b37a2968b52d30a65cffb26b3cb03a9d59890b2e68c2fc5d0da907d08f082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...