MAL-2025-149500 Malicious code in winston-izar-winston-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b9406e604fc2c6303c12f06f2160878421f2a4257836f24b73c851fa490122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147862 Malicious code in sequelize-auth0-publish-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7997c1594e3c8ca4516fdc5903416d5f8cdf4e40750e3fc69f596f4832c1ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142682 Malicious code in framework-halley-phoebe-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a41b1cea0e8542243eb3f72e7489fb8f21eecd41fe1e4965a1acfe533e66c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140365 Malicious code in canopus-nextjs-cz-conventional-changelog-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3bccbd45c710b8f6f1f3255a43b78cd7e70beb6efb60b17e950621c6b86d8b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139984 Malicious code in betelgeuse-hugo-promise-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a25079b613d6030c816cc270a257bdc5bb2c7b5b0b294acc68937fb741bd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149161 Malicious code in virgo-neptune-rate-limiter-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fb0f24eab897236a8f82e3344699506bb8f68e405e72048c7db8a045739259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142689 Malicious code in framework-oauth-postgres-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fef32f3e136480850ff99e1aa728eb1ffb82d2991e40aa84ce8cb096277e1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142663 Malicious code in fornax-winston-browserify-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f681f131eb8845d37ee1bdddfdb57567b5d6228bab90e97c2fd18160b3c7679f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146472 Malicious code in prettier-nuxtjs-metalsmith-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc0530eb1ad39700c42120f582e87d6140918e039de76026941107c4042d0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139470 Malicious code in antd-websockets-promise-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb7a47daf6d176ccf918828a6c23356d5df964bc510c3acbe2eb278bff3318e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146156 Malicious code in phoebe-link-changelog-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fed773ad62f38e8f3bd74b0c9bcaf7640090adafd10937effed4cce88d7a9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146731 Malicious code in proxima-protractor-mira-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05006d9d7135e2d50bc05fbcb93a478556d9f31bc654760d8bbe915920ba941f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-release-it-umbriel-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3a7442fa158b3448186041804b991a98c63c2e060a0da1051863fc9ef2f804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-mdx-eclipse-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a747424ae8e5b12c9bcae09e5d8848665d283990b419b4387e97311c63169be1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-configstore-umbriel-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07c63636c7adf18d4ab98086313fd9f92d35fb37e9ec0982f061391b017a133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-transform-mongoose-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c5aa347312aa9608e31732bf55144c791fd30f70ee314980a49a5e5bb3ea7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-ophiuchus-webdriver-mocha-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc99ba026da8566d257a516cae1495a6154a7a20dbfb8f5dcb605c6e138958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-zephyr-public-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc49c0e5e70b2b1843f86a8aae0bdc87d16c02b994ab5f99a59ab51c8e9cc016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-webdriverio-xerxes-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46c7044db02697faa91ea47e9e00a9fe04e7e7215ebd93e223558d8c16fd72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-dynamo-foundation-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b3b669ae32646ba1904a37fbdc812c5d0f58c8de7e5ea540f79e65395d1991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...