MAL-2025-141989 Malicious code in eleventy-aether-package-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35202d4e67fc27cc38dae4b8a48e505bae3cefd543cacc2a79d667c7cf47751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141431 Malicious code in cz-conventional-changelog-readable-version-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a797a57b56b21a8ef909b481e62c50dece4cc4fe20ee094f59595472ad6ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149809 Malicious code in yildun-command-chai-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd633c6313d4b9c28b2101444cb08386db672459f194e7ba9bcd01f32efb480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140251 Malicious code in bunyan-ora-typeorm-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c7e55f71c3f14590cd8d94dc6c2294d09aa2517827df0a5dd864ce315d3cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-metalsmith-soap-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3eed56ac6234cf263ebbaef75ed8de7d887c7664524ec5fea3555447a22a469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-meteor-colors-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d669fa9c44fcc67de8380cae4a7c1630c7f8dd8f2b7ce7cfcc91f937256c1721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144266 Malicious code in leda-docusaurus-dactyl-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe9540d294d05068d083d49e995048c8dea4981c2552bcbeaf0d0147055b72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140849 Malicious code in colors-element-ui-dagda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809245058bb39895586137d945c96906e0075bc1f91d6b1fe5d8eb799fc0899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-salmon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a442488ef5caabca8bae9b82d2a185abf2102a99144d9978ab6d56435bbfa3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obliged-gray-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04fe894ddc20327b2fb3e7036c84fe23114a4183385c745608ac91feb4a2778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital-peach-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e360ef67820510a0b6f73b56535080f3961e593c60ee32b21db7d19e0d4adaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-moccasin-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766fefabea1ab75df7bd4779927413822d03cb9cbabead84d4a76ff3416a9831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139035 Malicious code in spotty-peach-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6d0719b82d7975eae04cbccabd5809b89ca30b1486e425694e71f9a9d8d9ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139079 Malicious code in tired-olive-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73abdcc3b62486ac5b6a9409fa344cd86a57dcca61d5268fb1bc7c2d8499823a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138636 Malicious code in cool-black-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b4bffa4a144b3196425db620389a92d7a27be809c413aab9631c73fcd224bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138593 Malicious code in basic-green-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27433f0fa6bf15c5f4060e5f50fb47748d2d2ccdf05579f278a8b6f6d3accb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky-coffee-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937baec00ac8f0904a27fcc57288a2842d8ae07618857a3812c607570368d851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable-olive-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b584a7dd32122542a704ecc8eef1b178fee04df2fbdc39fdf5de20861c63543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-lime-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e09cd373959464c2b553567b37856815f98e1e735eb355a835e2bc60ba10c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-rose-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79756f833eb7b85846ecd66b15a72b2513b4a28a53a3e54df116a02efbeb293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...