MAL-2025-142201 Malicious code in eslint-config-inquirer-commitlint-config-angular-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1864a9f0a978b5307fe3bb4e9683fa2dad642b51c5213fba3a16a358a2a940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-relay-readable-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6153588fa07b05da227571629362574876da36eef3b7b257efd00bf9adc0f53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142625 Malicious code in fornax-hermes-soap-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d020f29de3afe6cb948bf0aaf77863bd0e8e830591087dadf33cfbb7f2c86de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145109 Malicious code in module-markdown-nightmare-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca582e2ab4dacacb6ffee3192229d9da9efc0e23e40c4dbb0ebb1180aa5bf3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143574 Malicious code in indus-relay-nightwatch-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cbfc7dbd014955090a7ff9658944678f02935f0e7d86b417c54fbd53fdac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143459 Malicious code in hydra-stream-express-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff343e869eea3d3afef8aa2d1b4b440a33ca6d31bae23e02944b00880df9f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141096 Malicious code in cordelia-chakra-ui-acamar-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe50038a951e8b1692ef49b02cf319688561c524d88b6c8447356cbde583c218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144577 Malicious code in luna-perseus-process-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d111f25f7d0648db4294cabc196148f31f40a14e517a35702870ab1ddef6bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141561 Malicious code in deneb-ursa-karma-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b979dee2a65906b1f5f1bc4c9fc7201001a399c12ab05938d322fd1880481a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147435 Malicious code in rigel-mini-css-extract-plugin-husky-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f37871c4a8724b6c1613d987323388c58f336411c4e67b30b2c13e84e0815b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142207 Malicious code in eslint-config-promise-jest-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c4f82e6f2157597c61c7da8d74b237bb4130bc06799b25ab24bc0ef47a1d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147794 Malicious code in sedna-socketio-cli-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e03e5aff6dd409bd6e5222f02d13b64c289e2d46e8a2c667863efbc4f671d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144471 Malicious code in lint-staged-xanadu-aldebaran-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1e71a79930a8fdf2ad86e251954f8ec7bd63403b42c9090b58e9fdcf90a74f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148503 Malicious code in telesto-sirius-centaurus-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57249715a10addadb8754d180f52226096d2990307d50b42bc2fdde20b9efed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140013 Malicious code in betelgeuse-weywot-cache-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2953cfa77e2809a1d55c771acbaa6285de51f8076e72b37202759c065d6c827c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146340 Malicious code in polaris-europa-csv-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3938c219c4816460cc37546a2fc49b42bd9f2df9bd9194194149724d94c575ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139154 Malicious code in sensitive_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66410a0bc1e30fc0454724628ceba7714eb23da1d2d92889673e46b130e2946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive-sapphire-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8705622d2e95c427d985ce2f0095e7f02ba8db307ea6fd6f933ffefc6b1dcbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139003 Malicious code in shaky-coral-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6361350251693e5bea2acb3dcba1f5bb554382651bcbaef9f32f69b9e183b4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic-red-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a18632c06042f55d22b79ca3d45debfbc72ed14d2eb6c51670bb22e13e2186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...