MAL-2025-155094 Malicious code in finish-sf-maewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc96e573187cbf4f15f2c724843744a270899eae155f8a3590a45efe3e14c553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-nextjs-draco-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104bee7c9443b8b60097c56006cf5a5de3a744041d0782374f5a0436e9132b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-koa-query-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e9a1af132a8126638baca3a85673704533f89020924385e0120402a4b1d9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-loopback-typeorm-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e2ce882a35af2827440b2150e881268e7afeb8bb1936417cdfd796f7f5ab4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-wolf-lacerta-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f98d1d95bfcdf082fc672288cb26a6ddc63781e022b68941472118f92f33e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145864 Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0637961794bd6bed51e0052831dca6497cbd5dc4bf9819df4587d8c1fe9e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142101 Malicious code in epimetheus-nashira-node-config-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3680ee4ede4d45b354c8e3ae081df1daf439b7b39c5de63cbecbe66cb1ec1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147437 Malicious code in rigel-npm-husky-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4121d03d3d7344a67a6387fb32c258d9a8f98720a9c72f0c3078d499a9a5baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148749 Malicious code in tool-proxima-shelljs-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 700c548dddf10ca56e72c2b175f0ec0af8b18e39f9d0a0033c32499e6a5e8872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149735 Malicious code in xml-start-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91eedc1264661a331bb5bda407d0b16cf6ff42036d0c67981b64050be0744e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140487 Malicious code in castor-leda-init-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1e61eb88822973087b0503c6c945e9cff5c7871fd776b41eeb9b423b647460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147600 Malicious code in sagitta-io-mutation-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371f55220e95098b087da7207d9ee1aad74ad9828791e58d89763a4c18cb07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147022 Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144795 Malicious code in meissa-bunyan-loop-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2570039e57cef0e6475a2bb439694e2b71ad50221717be387abd3674716b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-exec-umbriel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f961ce0c9fcf488462a54c9cff34ad6de5a026e596e381a681ffa5e5c0620582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-stream-cli-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-enceladus-gulp-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cab60a63c8511b40bccd2301495ffd61cbbc9d28f9404f78a527effde351c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-helios-bootstrap-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443c660eeccc84458663b73683dd4f9945a478b35f6e205b836a99b218487f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-readable-betelgeuse-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ae0e6f8a06367e95d49b65de1d5493df1d604d1155ae3b584b2a93917b4da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-frontend-airbnb-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8339c9cd9d0b4161213a33a73d83df39141d50d2f1ab4160e0efd9edc755a254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...