MAL-2025-144189 Malicious code in koa-dependencies-jabbah-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5750ce85cbb7e819fc26e82ac21b47a1867b190764e04914ec61a42495f474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144932 Malicious code in meteor-rollup-plugin-io-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50a0b0f70775d4832f652c3f9822fc10a8ee35fe551b2db4b3589bb4703b459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144536 Malicious code in loop-style-loader-webpack-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c401449ca2d854d6f789383555083c91f77978a2abd1a287fcc81f24166626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139675 Malicious code in auriga-dotenv-draco-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9b2da508ce5e3cd0f2e4e939e92d8107d8b398972b460a825cdeabd47542ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141985 Malicious code in element-ui-venus-avior-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeac183e6d94545c4266cef223f857dba6ee25ed0cafd0536c4a56a2021212f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139583 Malicious code in ariel-corvus-event-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6634e6e973158deed32f962021eb150569df92258f47d2f426368fdc00e9b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145653 Malicious code in nova-centaurus-telesto-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bbc66b20d8d504c89d9ccde8e832f98bb379a688b9c04e2ed6dc9641f1d34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148151 Malicious code in spica-apollo-iota-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419b488c19ab307d7bb586c2e61e93611f22530d984b9211a6dfbe9e169ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147048 Malicious code in rate-limiter-soap-colors-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d26fcbb86fac321c2a89996c3d3a5ecbae4265c62ca42ef3fb425c829669460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141701 Malicious code in dotenv-avior-native-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4165dc10ad42b1d39155548bc0cb91c1dddf403fc627a257b53939938306b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147905 Malicious code in server-sagitta-andromeda-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0600670352921b41432463070398d336c20e91955a99505b65681b64d4a2630e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-lacerta-ceres-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf441778c71088799e3df4f5fcc29bae87a6efe489abca752befa1db4e635cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-mdx-parcel-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6a19028e86bfb9dcc6f5f0eaa284b5bcb2698b973e93782079cf771658fc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-sails-perseus-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f54d6d3405988939147e15ad93363602512ac312efbbdb733e39a2f217639f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-hermes-inquirer-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04495147b6fa746c0fe38e9f928b8b97779d92f7e16ed600a62b76edae78a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-wasat-deneb-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96a644a34551423aab6177cdf5b0e4f9f3518295d29ba3e44f828630f3daf27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-meteor-nconf-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30fcc6b4e7d9a41224029e4f0c88435e1ea06a37c80f6cfa58bde9de0959693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-atlas-ophiuchus-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cf5a6cfe972b72ebb9d35d0e9dca13f2661913f52206351634dd057bebb6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-gemini-epimetheus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4658177041c44d49b680d0bd92cd711a79aaf208deb3a59cdbf0279af0d5e4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-procyon-rehype-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f341d2a974fc570dc7f1c47a3322c6fee747c68d8ce6c087f689e905325a6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...