MAL-2025-139370 Malicious code in altair-ultra-grunt-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff770cec8eb98e87d441bbd3804ca0cf7dee5cf9ea569733a7a118df8e241c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142288 Malicious code in europa-protractor-readable-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa112931e43f24bbfdf4a2b84e975c5dc4fb7573e88503849b1ec74e6da0a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143223 Malicious code in helios-acamar-cypress-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9574053cd71576ee0f80d65ab6fd694f6fcf07821d3526d0442742f118fc9909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143837 Malicious code in janus-style-loader-alphard-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46be8a3b2073afdb630484fc8ae7adbabb0cdfec815282e31cf67e4fbd09eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144530 Malicious code in loop-ophiuchus-fetch-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0506250f20544e8ea50d856e84eda191a6177d7846e809be15c6038a85dde340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139497 Malicious code in apollo-bulma-polaris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692d8948eee5220a89db98305c0c5b8563d44e1e8f148eb621bcc3b1f6e1b915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140743 Malicious code in child-process-altair-convict-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628f999ab3623b51c84e48ddb51601ead8351a062964980febe613b812ec3a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146757 Malicious code in public-deneb-capella-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71646657fcef95ff5edb1350b767e161fde867e8f784c1cd2a4f910a9f1e9912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144133 Malicious code in kastra-stop-vuetify-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277a72bd15a20407adf823289d0074b355848164fd8d6bbad0ce7f65c6407b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140757 Malicious code in child-process-telesto-test-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173fd53c1da999600d870a02683e28098bb3288c9a590b7739013b33c2b68fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144276 Malicious code in leda-janus-solis-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed9fb31c30ca5d5d897eff38497628d504dc12949cc78ef5f059a5a10c1355d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141977 Malicious code in element-ui-pino-pretty-miranda-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50277e8503056daf632dee3b6f8e95f0bd81b20434b0d5b3fdc14f87eeb96cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139318 Malicious code in alphard-avior-electron-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d2c468b04a822b76a02641754e6a432183303be1da6df9eccbe3b7fde12fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148579 Malicious code in test-rest-yildun-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd93457911583a80de21e9b21451295f65c77d6d419c0b90cb170b23720d02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142167 Malicious code in eris-command-rate-limiter-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7abe993bf638dbe98c04283aed6d10f5a2bb33bcdb8c09e606063d2c0a09e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143481 Malicious code in hyperion-janus-mutation-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba7b7eb0f6c687a9bcde5c0c532b5d9698dc27484469216a559c9bcc183edd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146493 Malicious code in prettier-plugin-markdown-rocket-jwt-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e316f717f951684854f53cc9146802095eb05c75ed1e3c191dde9f06c5ce10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142723 Malicious code in fusion-barnard-vortex-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc006a1619b4883238ee51f3a4e4ac2d1b8e1e5c6068d0f991ce840da14dafb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146837 Malicious code in pulsar-nodemon-lint-staged-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a64793cfc067ff071d4900d58002ac684aa22b19764c3fd61c0daa0cf3e4b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145813 Malicious code in ophiuchus-duplex-koa-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026985088b076b41d3553a135400fe4e6195e5a076210af526056f647ef5ba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...