MAL-2025-149152 Malicious code in virgo-child-process-flare-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65c77657c11836813d96b9f15522a940c3e8048fe28f0a62bc4f01fc7793e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139459 Malicious code in antd-loglevel-sagitta-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74998325ae8c37749976304017144b18be96fb00d74ce19a8051c1a358bb1af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144496 Malicious code in local-relay-arcturus-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b94daec19cb98f864c9b7ec7cf51839d4fe4e4bddcac92fb252a4271fe4750b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141487 Malicious code in deimos-alphard-nestjs-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2a1db44cbf758c023fddc4953d43953b89647c6ce1a2f527ecdd091804b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139778 Malicious code in avior-ophiuchus-achernar-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8afd34c176b61d18d2d2a77dba4d88f6eb6df7acf0d470be7dc7463628e0a0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140506 Malicious code in celeste-forever-bootstrap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2664a9a6197e54174e920e47bfe1732ec24d3916eb0c990bf54ccfbe187e4e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147031 Malicious code in rate-limiter-bulma-enif-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c05e37b38ab2854388dd18b3d5cb644094e7e0178fa0c761fdc638d8050b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140690 Malicious code in changelog-upgrade-native-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985c3ae2349fb80095178ca8c1c3d0e0171ce3f14382f0bb8265bbfd705918e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148923 Malicious code in umbra-metalsmith-hermes-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbd93e95ea1a4a643c5056c08bcede32284315366dcdf316f1b9da9df3b55c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140275 Malicious code in cache-luna-socketio-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ee266d139f89aff6fffba83237a702f6d2665de63832d7becb99225fceef2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143608 Malicious code in ini-supervisor-ini-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29a32dd2b265a29cfbec53f5ec524396621a56b1ac1096d46802296fb8d328f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144043 Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142727 Malicious code in fusion-callisto-parcel-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78094ec84b44c653fb466d59da99ced3eb3102b8ca8e13b0bef3f006f795826d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149607 Malicious code in xanadu-repository-csv-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ead5f8503d609c94b195919d9555861782f4245cc4a6fdaf0ee4d636349c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147145 Malicious code in regulus-electron-builder-toml-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb363ff17fae4c8c782d0db9a96bc1aa2a403f59fa362575ea111d739766e891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146530 Malicious code in private-cordelia-quark-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26f958058c92d17ab7bf61a0ab319c24c7571b2f628738bd602034f1e85293a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145612 Malicious code in non-blocking-kastra-eslint-config-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6733a63686f84a737c0a759a95d9448142cd5dc89513c785f1f746ab028b97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145765 Malicious code in octans-concurrently-scripts-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f839841b4ac2990fd955ed429b446fcb392f955126d839c514c4c9c01d124e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145033 Malicious code in miranda-firebase-non-blocking-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c957b2e89a78b2ed4ffc7627c5903a922bb5f6dd009837001276b57045e6a3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145818 Malicious code in ophiuchus-halley-graphql-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1b6ad259a3d25e212a69ee17961f59715e73373856eb7ad9ab83ec13be609b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...