MAL-2025-145835 Malicious code in ophiuchus-phenomic-alphard-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58fa29011d4a3463e0941cacae1e2932e8633bdfa6a02fee6fceef04cf7cdca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147276 Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2b8aaee7f9fe3275d75af04e4b41551c3b458a7c59abf6aaf958977f5d449f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145352 Malicious code in neptune-aurora-backend-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfb10cac4b5a1dfb6a498b2742fde2ada9966efaa48a9f65f9142d0b3af950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145800 Malicious code in odin-mysql-nuxtjs-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4033b37fcff598341cf0941569995dbb2e1ccdc078a67df628d3d6ceaff93234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146395 Malicious code in postcss-loader-fork-levels-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb87c440bcb3eff380092f73c31bd01232d896ff500023793df85c072d0644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143527 Malicious code in ignite-sqlite-celeste-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4d5abb0301795f75d05de9285062e5acc9ff864947b09c2cb09590507f1030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141137 Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139141 Malicious code in horizontal_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc79bcb5a81f82f8ed7c71ef14f19bf018e96b359898de248338dc73e1d6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lavahala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0cd59a7eb6295d7f3e73580981b286f953cb7a25ddc84543be740204c31964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af86dbd8d335bb7ab0960cc1ceac104618c08690daaa5868155958023662b55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df460ff6b76f4f64063dbe2db77c1239448df591e6fa7426bf036843ec15e079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate-magenta-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035421f4cd958a5d3b454ce933b042be38d92c3a1d1f1b89d7b329c8c2f60531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted-maroon-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25b1d74b0fe2abbb639904a901d5664905bbf7a4f235ae76bf26e9e90272641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly-crimson-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3101df7313222040720e715f30fd263d1b54ac065addde909555afce2cda34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared-beige-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a7795dec554714ee6d12138c4b61dc1eedb909e572d48fa3de60066f609362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c08012984ec3c311cb9324d108ac55bb472151dce64bbcee684c95fd2696032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing-silver-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522a8b5b9ad0e1e4926c447833fac5958ed81476318ccd064918aabdd03d0795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138963 Malicious code in racial-chocolate-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df767f4c41ac852c8a914c950c465822ae421c0dd34d5e87fe8649ecb5aedb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139126 Malicious code in yeasty-tomato-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00a21a7205d596964651bda256ca7a2fd53a0127505ad4fe4320c3027cb243e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139066 Malicious code in technological-brown-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ede7fac648eb907f0a40cee44c62a9eeed8211c5935f92f948cab14b107ebeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...