MAL-2025-141191 Malicious code in cosmiconfig-nextjs-tailwindcss-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb61a59a4c5387bf62fb5b1b0c1e546a26f65fc5263ca200c39bad00b2c76c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139319 Malicious code in alphard-cassini-graphql-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd54466ce4a0e589e6cfd05676bfbf43cadcf96c5bc39e9da4e4a4819b766b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140441 Malicious code in carpo-ganymede-kastra-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afb774a53ba565469f8094ace021d2bfe40abb0b43530b02ab62cd932873e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148374 Malicious code in superagent-build-spinner-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e98cd0affb029888ab835e51cbcae72cececc82a87445c1f0b863fccc699077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143244 Malicious code in helmet-atlas-dione-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cedb98257db03c35ab67fcb42b96a9bafb82f748dac121b9ca66184b2270ca29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144146 Malicious code in kaus-hyperion-polaris-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bd7a1286a4e1e9893b11fe52ebfd03d8ef4f1d008b1af6210b476bed676352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144843 Malicious code in mensa-chakra-ui-acamar-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9804ce70db2a76211a21007dfe8f7a24a50604bb846a42933064d96c23ada4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146738 Malicious code in proxima-shelljs-rate-limiter-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3dc1868def93642482dc1cde7445a3203c79d579a7682f4e895658766993e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139509 Malicious code in apollo-element-ui-magellan-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba972a9af2c18c32af8952189c8f1f93988448b04dfd8f4e96bace6ca92a2058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-dione-meissa-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32bc63bed0238baf530b564efbaf9960fa464e7b07b5646eae445ca789e121e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142315 Malicious code in event-hyperion-gatsby-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ce354f9451bace74524238b8c15adea7ad047426a0bf61a876cc44abdf5289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140321 Malicious code in callback-venus-flare-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc23af055cefad148c2cbf98683998b9525982e272f70c25fcb1f3cf400a4b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-docusaurus-docusaurus-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1086f199d13d933abbfe5f631549cb046e455883a60b41cc0ae56d86f83e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-mocha-magellan-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b92ad39ccb22fe52557c637972644fce9620f731d30fef074566a3a82f31f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-vuetify-websockets-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157398aebd6c7afef671792bfbe7072fe28cb0a167665eb11bb9f03a9a270231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-cluster-wasat-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870d69410b64679e12b4dc69b45ed871b6d833f3aee37e7b02406623d15a891c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-jabbah-enceladus-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67a932f8103657216151be707fe26add8546a8003466cebcb7dfc30570c7fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-dorado-phoenix-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c06dcd35b1cd056dad87509186667ba2544e0b69410c71587604ce328274f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-halley-non-blocking-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f102816d1ca7c2c09d3c6c14aab8bd1a8a6f2a28ff7782c0f63b68d47c0a70cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...