MAL-2025-144052 Malicious code in jupiter-charon-concurrently-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb1a4b72f5e7dfbf46d2ec719a3664799804836dcce96db92b44fa905bfbef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147365 Malicious code in rest-sagitta-subscription-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76feec4c0ec22af6d32cf9249d74d286f41c8961ed3538c6a0a07fc6c71de1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142557 Malicious code in forever-algol-react-bootstrap-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ed5e4fad8e5d6989b6c0c9be3075804f8386ca224135fed892411aa1acbd39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143098 Malicious code in grus-polaris-cressida-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ba26fa4dbb1e602577b4133c013d196b716317ba0da07038cef37f6f9ff5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144839 Malicious code in meissa-wolf-server-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415cc67a74743d56b584974cbe4bdd788fd9b44edea0c49f73e87804b457687f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145446 Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144304 Malicious code in leda-yildun-impulse-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7b684f94135184bcd5a2f8b650ab023e39020319d3230e7793531aa7f15b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149033 Malicious code in upgrade-spawn-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6ae84aa5b7fe85307aa839241cc7ad1bc03413134bad3133d229dd5cb63412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140660 Malicious code in chalk-wasat-juno-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe737cfc109d50d973a0bd7ef6bb85265322f12059957b9931ec6ecca31060d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148905 Malicious code in ultra-postgres-publish-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69ef1a05e965d83cfb4cb86ad322a2c76bdc4bcd679eaadd6fb496f43fe92bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142033 Malicious code in enceladus-process-sqlite-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9273611d6fcd1c1d08fe8e868a72e5bb8227c46876500e01a1ec3d3839c7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148319 Malicious code in stream-impulse-halley-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f43ed0fe224677a8bd0b3ddeca70ab4093b2d2108e29be6a7fb5bd8c529553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148188 Malicious code in spinner-commitlint-wezen-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7248b099b94049bc225949d94b135a1b4daaf5102e8fb556c93c3a3b747c13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147259 Malicious code in repository-canopus-csrf-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57df37eeb7e187b75a267e5bee180848261635a3aa7cba4cddb584697124456d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140019 Malicious code in blaze-electron-ganymede-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99503b4040bfe0e830f3ed01ce73d0f71ebdd7bde27331e44d0645e89970aef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144883 Malicious code in metalsmith-mui-less-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141118 Malicious code in cors-chakra-ui-norma-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6583e3fb97f1c660d5acd6273f78cff0fa61a0737fe5b0b5233e8b582d2659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142741 Malicious code in fusion-nconf-venus-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e5556fc093097aa6272507a5812f1ff17fd79e8a6ba105a158af368ca74876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146886 Malicious code in pyxis-perseus-release-it-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b04e9c06a4cc4e95b2435dbd3567c0e5ee46522a071221fb8a3640bc33a207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143657 Malicious code in inquirer-redis-nebula-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105fc3f9e64bf199b43c2e0445127977e9c604d6964b88bcabec49ef31477748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...