MAL-2025-139604 Malicious code in astro-ganymede-commitizen-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48400c22bd31218fa5bff3e3783f3879701a1050eb62d06262c5f8c315b0d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140512 Malicious code in celeste-loop-nightwatch-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8831623cd3ce919a2e1cf64530b543fce464aaf11766e4316e23d373c57b103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143373 Malicious code in html-webpack-plugin-sync-perseus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d54e21caa1696cf3cef247fe0d1e27b9dc0c37818e8ab73e05d4850ef300030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140679 Malicious code in changelog-protractor-bunyan-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8d924d423f039c7a3fe6145082b38e7501a3ff931d7a0e79bce1d9b18c274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141975 Malicious code in element-ui-nestjs-draco-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d3d5af2f7340132e6fed6f2da3b621668536b4d11f2c9d5b05065138ad0780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144086 Malicious code in jwt-spectron-global-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19c70db984d25aa49a8e055559447580b2522c142759cf4f72573777240e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145559 Malicious code in nodejs-csrf-dotenv-safe-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26fd12eee08a4f07fcaba1a5843f9168cb580449aa6d44aad362c006e15aab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145177 Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149259 Malicious code in vulcan-vortex-soap-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167edaa616eab6481ec791de4d0adf51b73b0d4cbb0df8373c2d1a10d01b7f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143404 Malicious code in hugo-tethys-mini-css-extract-plugin-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7dbc624650bc0b3834c7a8d66f0048884cd10d0c3ba1da0fb8be592def28e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144465 Malicious code in lint-staged-sirius-xo-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e17f64d7f2c40a23b7372bb25ea8330f1abf134122c1dbca12aa0be572e7394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149774 Malicious code in yakutsk-luna-sadr-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3996a4bf7897414bbaf10aa9131054dcd59cf851b964ad40cd9224667d292f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148672 Malicious code in titan-buffer-sagitta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd25da2ea12c17bfcc8b82c1f080529ed705b80141907868b255187769fd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140456 Malicious code in cassini-antares-zenobia-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae175ab6d944e9cf9204c7d27941811023acf0a0b69313e5511b013600b7cb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149447 Malicious code in weywot-triton-wolf-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c76a23fb4b2ec2a76ff4c94f687642511b026eacfe0b07ee54c8f8ec80fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139454 Malicious code in antd-ganymede-iota-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496bcf3109d8c85191508e3681cd2e838bf5b6ed5a4cbe95dd8f4f484a420c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149276 Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142828 Malicious code in ganymede-winston-enif-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5f05b3b4884fda91ed4e5b87e250c8d1fd333f9772b5f001db3a8ff25f07b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146634 Malicious code in promise-castor-pyxis-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e998a570333fa94903c03deacaff2fab31b844d926782cde24c805305d916e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145124 Malicious code in mongodb-cz-conventional-changelog-ora-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb147bfe801c54e943c3b384907f9f9185d5f7082e95835e37acd74d015cfb86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...