MAL-2025-143737 Malicious code in iota-pegasus-radiant-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2531c5cbdb119ecb6a54a745c27ee948801438590866abeae89bed715462a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142408 Malicious code in farout-despina-scorpius-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad7b76331424a8a1a1b458b74349bbe8a9fb440db79c54dd93f88c05be30d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146896 Malicious code in quantum-await-meissa-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b266656851997bd16c46368109e5670283650a90335453f7273328644de42a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-airbnb-pino-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b41bcb691b34ac087839ae6fbecee64c8eb6f8039658ce929656436fa9030fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139969 Malicious code in betelgeuse-betelgeuse-cassini-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de30e4d515c90c8d81f0aee56858ae6df343a3a02ddf287cc29b3b20c1380a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147694 Malicious code in schema-hermes-protractor-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311ec7f9045fddf8c7c21a4404faf26ee70fedcfc9e70a91864483145cfcc228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-version-docusaurus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb161afc3d9dd4d496a79612aec44fc8f74b2108cbd00da73462e7be4619981d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139230 Malicious code in aether-deneb-upgrade-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f6c00e3e89c4212a8ebfd8666bc2f8983c4e438a26efa2c2358e75f383953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149749 Malicious code in xo-hermes-csv-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac54c4f56f565c7cc1577845904c3da765754c0aef53b6fda637b70bad32dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143405 Malicious code in hugo-toml-blitz-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9361008ba931b52b337d742d78c7b93e69b87476519e03d0f4b77407c5b4a80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144592 Malicious code in lynx-element-ui-radiant-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb459abc2161076cb69f31b2049920a455adad9b0cc0065929cac806e0f95cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140047 Malicious code in blitz-impulse-geckodriver-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0618ce967e87623c467784db730cc31e57def2ab1ce14eacec960f92e0a40d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141474 Malicious code in dagda-jabbah-xenos-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678aea84d3e17daf26a71a1227863e69cfc430bb5d394a840da880b8ae787a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142530 Malicious code in flare-koa-version-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743fef05b826eca569bd55c8b8e63b265ee14b3619c017ffaf94b5c85fd9cbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146596 Malicious code in procyon-hyperion-dotenv-parse-variables-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9621017bd79ae03f3436899cd4c34919e27db6e69c2be76e298958807b4f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144157 Malicious code in kaus-umbra-dotenv-safe-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7c8de543f5e9ad796c6b27d6f2de5bb8f1d974f1f4ee10a094e731139c606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-vortex-phoebe-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df9cf3eb42d2f5ed6e088a87e33540bc56bfed7f1f9ded003fbecbd6a1cc13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-rest-commitlint-config-angular-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5f62624d7af56b3ad9391610058a9c8347af8babae64bee75e0cb6963cf960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-ceres-element-ui-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a077177e77d8dd179974db351f01ac49b8fccde97b9a54405b9175dd8ac2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-ini-zephyr-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605fe81490d64b2c1a772699d84c2999f71b970b02bba2e93361a77189f5dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...