MAL-2025-143704 Malicious code in io-pino-pretty-start-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7227feb91a808715799e857158fe7571b0a692dc72fd0f919c3b346390daddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-vuetify-foundation-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72476d2b806b3687d1fa43ef3713ada1a16d869cb5a1f91e4df2ed45c57b6dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-zenobia-wasat-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629222bdaf4ec08843dda82aa3183c588deb4300ec12bf7106646d487cd874b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-cross-env-fornax-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2036a1f904155c1250ef7438d2911735814027d03016415f8bd885b0c165883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-aquarius-jasmine-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21ab829ea85354ff304d31cce53fd77f2a6211441349ac39f4443d4f712a164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-kronos-react-bootstrap-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c133b82c7165f540d326fea4a684aeda902061625911d0830a511b75ceeb1744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139863 Malicious code in babel-iota-command-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4053b964c04b56158ec8a42e3d4cdfcdd483167161fd27455c1a449b7b31160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144117 Malicious code in karma-prettier-slidev-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e6ce12f1a4c7dd2227763e56d479fe4f97402c77d4cd79e73067388a658c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142813 Malicious code in ganymede-nebula-playwright-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1f1c5a4a1c55419ec29857d1e30fa3543b82900639e451034c7637c80e6af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140586 Malicious code in chai-chalk-procyon-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e028459fb96e99934f5ed8686ef1b3f1f0a5844dcb39718e08d7eb38dec8e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-grus-csv-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23074145049a720e304aacae238b9e6e91e6e85a207ebbd06a7a074a4f7fa95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-blitz-jwt-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad40f6b4c653a8d4b76f65b28575d51152312e7a0a56ca06c6229c9f07afcde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-epimetheus-transform-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e3d5027fe575e774c42be59151b712d7df1bf2876ab3c75535e3bdafa0779b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-hercules-passport-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d35b3e51bfb1810de33b2f4ea9cab7df1d5791a942fbd1876fe2450e189d983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144990 Malicious code in mini-css-extract-plugin-proxima-forever-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb980ed42d4d4218e2eb35162ae3361262e60abcf57f5e770ace6c3a0f9479e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139711 Malicious code in aurora-sails-orbit-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ec13aca688ab1c0cd0d3904d54b99efe70975f07a3ed1a3628f53017e57239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139927 Malicious code in bellatrix-bulma-postcss-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae5404a833811b66ae189517e867b655010ebf4f69b88a43eab14576f3f8879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147429 Malicious code in rigel-bootstrap-triton-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdd7d5010c8bed6bd41e03d61290b096febab526e48988e139d60019cbcbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134818 Malicious code in kiki-nasi55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae07c76572bc57f9b6160d742e3709e70132fced75e150993281a6b2c4c312b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9282bbd5afd6701b7c176ce8633ff3dac5892ff1c2cc520628a09bbe8048c67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...