MAL-2025-143967 Malicious code in json-centaurus-yakutsk-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf37872579d57c7904980d46accf7a399584cfd1c2f943c8c74688895d68442d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143580 Malicious code in indus-vuepress-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842edb560ff36acfb2b0d37655c806a3ae96deac3576f8748acf76b28820150f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146455 Malicious code in prettier-await-sedna-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da20979527e65cdb03261ee8581c9c8260077ed1257406601373d8afa2819e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148432 Malicious code in sync-rigel-prettier-stylelint-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36fdfe2ba2f55f9166a1ca14e1f32bf78fab47697ed4a1450f221028760010b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147293 Malicious code in request-event-antares-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450c77c16e7214dddfd423894d2688c8084da5ed5cd5285c01ccd574dca75de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148931 Malicious code in umbra-package-phoebe-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5170bdb3949a9ddb02e184d4943fb1ca429df391da323586dd6134b1365623f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141935 Malicious code in elektra-acamar-equinox-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 030c3556c12040d6b9df31c7bb5424883e630cc2ee0b0e91d4b4a629d6d0b567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147311 Malicious code in request-sails-equinox-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a9d4aa712663209c5cec98fb31306a7661ddbaf9bfbfae8b90424fd591cfe7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139219 Malicious code in adonis-virgo-cordelia-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e07b7ec5a3ebdcdcfced2c14aa60be59406831219a126661a9b616532b03b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144398 Malicious code in link-await-hydra-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e220cc1a4907d0adb9c57a3c648f2f94a2bd56c3c791b05377f7ea379437add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-jest-ursa-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4e8c378c417792e988304c30b5864031de74fd0ddc5df3e53b06dd10f97124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-andromeda-jasmine-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ddb6526ddb58ea3ca57c2cc5afd76d135b8bc9b76babdfa5237dfd09ed5308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-proxima-capella-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c4e4e6eafea389b8886de6367219c50aafba5925e89c98723c039c522076e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-carina-orbit-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da58859ab52b3231aead005ce310dc160b2a16630e5033653664c254da15aad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-run-script-chariklo-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbceff9779dbaeab7c032e371182689bc834cf52fe500c6ef39d7e87ecc0da67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149769 Malicious code in yakutsk-got-antares-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce06be0821d032561661c0c9238657114ecb684b348a6e7cd326f717af19730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145727 Malicious code in oauth-dotenv-safe-sagitta-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2a9426c6344cc12dc0c13201ef225ffc7651bcf98aca5a8f8fc981a1464400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139473 Malicious code in apex-bellatrix-lyra-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32274bbf8d68aee016a8f42086b4f0e2654b8650a7fcbbe110eb525748fb342f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141692 Malicious code in dorado-local-dotenv-safe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d65cf7abaf0a3cc4bc9be9d18b01ff806f8e740363dee4a0772a1daa3691af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...