MAL-2025-148273 Malicious code in start-jest-umbra-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a714daaf767bc9fef0910ad4c37405fcbc88ae14e3ddc1bcb4bb91c35ab41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146005 Malicious code in pavo-pino-pretty-chariklo-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad8694ae5e9e2fb525de2a361d94caf1cc4b51939e350ba2974d62c71dff68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139923 Malicious code in bellatrix-antares-halley-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7459668e9fdfe7e25259ab0a5378deeef5aab39f018a73af01ee396aa5f1f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-async-chai-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bebb3a1d4e6316ecb3cb068849e8583e3c018822785e04f57d12163a672d45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-pyxis-janus-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666e29f61ab6ce0ddc1bebddef7621e12b483e2d514931737ba2ee049df942c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-superagent-javascript-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b794550053245b66618b7061c10440b97b535bc4dad030d638689510877234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-ultra-hapi-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a2f2be72f028c1bd41566d4c6dffafff9cfd064e1de5c737a3dcc95aaebf2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140396 Malicious code in capella-rocket-io-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc3c5393b7fed0671dbe77da2928e386acbcc6663d85e74b8de4a915d0a5dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143581 Malicious code in ini-apex-ursa-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db345a3df99f8640bcf7211fc77cc9d6d6a65310f8165ea42480bd60fdd7f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146133 Malicious code in phenomic-fomalhaut-xenos-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d6eb4faaf6ba78ade9972bd1d892ccda5078e7cb3228cdd5506791220d4601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140827 Malicious code in cluster-gemini-jekyll-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5048745286b07cf1af85ce48d381d6c247e7e07dbcb4b62a9ef60a15e18de9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146342 Malicious code in polaris-fornax-betelgeuse-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3404c1a6247e9db097e33c1be9d5720d9c12618365536e813f891f26d2a35942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148604 Malicious code in testcafe-sass-loader-morgan-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147168 Malicious code in rehype-eris-algol-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa52e77988c744b88131fd41aa547759e2c6ce9957fddcc2632329184357735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140895 Malicious code in command-altair-europa-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4431958b7a5d25de1134d1791fd5552fd6b077c0313112a030d1ab074c1a4a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144723 Malicious code in markdownlint-lacerta-solis-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a350fe7ddc11ca9a567e3847734b551ccef89edc4b2674c0c9470a0aaef37b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148598 Malicious code in testcafe-kinetic-meteor-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656c9560ccd17e180daf4aa2254dc60f3255420737a36176c05728b8fdec1786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148727 Malicious code in tool-andromeda-kinetic-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd6d024ed78c25836f75684b27d647a8f118519dabf7f00a4d1a5feecaf5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-karma-rocket-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0526c1876e6ca917c406bd85bd5f010372f899172a5af0441719f3554760a9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-spinner-dione-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b83bef8ea4e660bc19ddd7833865216b2297bac5083abd74540da72d493af87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...