MAL-2025-145216 Malicious code in mutation-altair-readable-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0640e5d7dbd534dd75362e631e2035cba7e43d9d2a66b753602e728af6ba27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144892 Malicious code in metalsmith-vulcan-lint-staged-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00adaedcfef1576cbaa1825eef6a2fc622e44390a3c11db042201dc15ce9b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140801 Malicious code in cli-install-hercules-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449a5c8ab2a770e90482ffc3005699c09647254cca1dfde7705de5dde90523a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142557 Malicious code in forever-algol-react-bootstrap-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ed5e4fad8e5d6989b6c0c9be3075804f8386ca224135fed892411aa1acbd39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140582 Malicious code in chai-antares-gravity-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78991cb9ff54d1247228b1af1b38ec21552073b5ade063b1ff9372b67c59ee8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141064 Malicious code in configstore-semantic-ui-iota-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522661629c144c726922f88e7442ab71fcbffc91daa5a123695bf5248c25ebed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142363 Malicious code in exec-winston-loop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43316f5983d8aca28f6e31863054b8c78639303e35a1e92460a364c3a9d917ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148949 Malicious code in umbriel-umbra-centauri-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 730ecf02d390d974c9e68d023c5b047f8ad6d185562a7663d8e5441febe5e4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140173 Malicious code in buffer-sqlite-lint-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b81d82173bdf0f665c1ca09fde051e4e1271c05890439161b637da0ce405412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143098 Malicious code in grus-polaris-cressida-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ba26fa4dbb1e602577b4133c013d196b716317ba0da07038cef37f6f9ff5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144590 Malicious code in lynx-csv-bunyan-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d80dac0922caa37c040c9a8061b3fcec592a3beafaef79f46568ce80e1d71e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142741 Malicious code in fusion-nconf-venus-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e5556fc093097aa6272507a5812f1ff17fd79e8a6ba105a158af368ca74876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142231 Malicious code in eslint-plugin-element-ui-hyperion-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5038fe2a3c36f89c8648d1958ea6266b9e56a0ef60f2efb00d26435c3e79a2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148651 Malicious code in thuban-ganymede-sirius-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e9ae9e62a1196b1a4ae777bc6ae0a4cd8e3f48f279f852f8802edfd651784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141664 Malicious code in docusaurus-eslint-config-telesto-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6b3b8afa60d7366eb009f4ec27b46798e82d8153856f9a70813f982fee90a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148522 Malicious code in terser-ini-sadr-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223fea25c7a829f0d18381828d10a6eb1ff9a51c1adb446e5f6fc74b31860fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141673 Malicious code in docusaurus-process-jovian-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab06500252ced0b44546abca0d6a540fef34b17a5c86c56d86b163c9f31b0527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139670 Malicious code in auriga-aldebaran-toml-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d65623a858a86f5a8079b505bd7222e63f14ec06fef9d9b87f4b81e67f018d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144192 Malicious code in koa-electron-reveal-md-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bc2848e7e40366ae4424bcf5d0323c1a8284f8c81db4e7d58b36a05f3f2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143521 Malicious code in ignite-package-axios-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef8c8e4d26e4c087398ef01a4932e69e50bf317619d961392b3d6ed7f863082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...