MAL-2025-143161 Malicious code in halley-pino-pretty-regulus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c08d4d37a0908dd0029adbafb586664fbed5cc5672dbd3fd6939390f094e0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140316 Malicious code in callback-semantic-ui-pulsar-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725df051562fd911016ab37e1224723c9378e825feb45c51b9138e9a5b05c7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143168 Malicious code in halley-spectron-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73c947e71aa2563113e69cae4a5ed27b095147d625872993d40c732a020be3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147405 Malicious code in reveal-md-elara-algol-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5b0453b013f59be9fa1f4de877ba3900d709b9cc706e7089493988f189d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148094 Malicious code in spawn-chai-ursa-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603a1063a78f7e38fe4f0f14980576141ab4a2b8b61770ff4e99fb73146f6944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146141 Malicious code in phoebe-bootes-aquarius-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce10c3e3d36e1b8880dd58b72e16290d55fc1cd5effa53d778ccb201ffd9ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149259 Malicious code in vulcan-vortex-soap-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167edaa616eab6481ec791de4d0adf51b73b0d4cbb0df8373c2d1a10d01b7f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149452 Malicious code in wezen-capella-release-it-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d598619f1bafc4a144ea9b4ae5909cdb7e126952c9f3d57b5ecbc92654451586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140128 Malicious code in browserify-aldebaran-xenos-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f277a8e2043125ef61eea10470609ab461aea2f94e9fe3ca7c9b106662eb3254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143967 Malicious code in json-centaurus-yakutsk-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf37872579d57c7904980d46accf7a399584cfd1c2f943c8c74688895d68442d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143580 Malicious code in indus-vuepress-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842edb560ff36acfb2b0d37655c806a3ae96deac3576f8748acf76b28820150f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146455 Malicious code in prettier-await-sedna-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da20979527e65cdb03261ee8581c9c8260077ed1257406601373d8afa2819e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148432 Malicious code in sync-rigel-prettier-stylelint-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36fdfe2ba2f55f9166a1ca14e1f32bf78fab47697ed4a1450f221028760010b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147293 Malicious code in request-event-antares-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450c77c16e7214dddfd423894d2688c8084da5ed5cd5285c01ccd574dca75de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148931 Malicious code in umbra-package-phoebe-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5170bdb3949a9ddb02e184d4943fb1ca429df391da323586dd6134b1365623f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141935 Malicious code in elektra-acamar-equinox-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 030c3556c12040d6b9df31c7bb5424883e630cc2ee0b0e91d4b4a629d6d0b567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147311 Malicious code in request-sails-equinox-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a9d4aa712663209c5cec98fb31306a7661ddbaf9bfbfae8b90424fd591cfe7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139219 Malicious code in adonis-virgo-cordelia-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e07b7ec5a3ebdcdcfced2c14aa60be59406831219a126661a9b616532b03b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144398 Malicious code in link-await-hydra-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e220cc1a4907d0adb9c57a3c648f2f94a2bd56c3c791b05377f7ea379437add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...