MAL-2025-143839 Malicious code in janus-ursa-rimraf-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fa8467d781bb8828c170ff1d24643e2fc2541535f36c7baf5fb0ec62b92371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146469 Malicious code in prettier-ini-babel-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b566f92ee775fdadbe70403772b8454710e9712622c79844d941ad37fd3875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149502 Malicious code in winston-jupiter-node-config-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4eee41e3597118a0d7e5e4045973e1ab46a0ea07c8f35e8a7f01da69e57b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148831 Malicious code in triton-webdriver-mocha-hercules-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c377541408e4dd2d0d9420417ccf43e9296fce7cdfd3020e459e556e4478417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142086 Malicious code in envconfig-sagitta-procyon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf67b16f212ba924c7631f97f60e80217eff08f2b58584d029b03c21095a338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141391 Malicious code in cypress-antd-fornax-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c855c95c3a03772d2e386d47b978088412c25d466f3bfca778c008d0a7bf288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143303 Malicious code in hermes-callback-equinox-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9eeae41056e9ee731f753077af2b0161fbdde4dba399081a1dad649ae59510a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-sedna-callback-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bba612a2c27396bdd6c0082f37a7b31d445c50826d26dc620a866316eefb7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-antares-europa-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7129fe13bcd2285e085d76bd8a68dc750f731da29a69b5cfbab407fef5a6ceb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-axios-neptune-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c252bb6bf02a453e2c040c92b6ad36011d7b90fed53499c361d837ed2742b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-await-vortex-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8e71b70cfd7083ba4ab77611a35180bc9e213d9cbc366918b93d2ba4598fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149802 Malicious code in yaml-prettier-css-minimizer-webpack-plugin-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bc65e3e45d0b0fb2609555e9248cc76a7bb27b73e51d498e2ddfba8bbef536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143410 Malicious code in husky-backend-jovian-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fb4816498eab7cafc0d93672a74a76721f2a2f23303cb6d53ef05824210e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-canopus-promise-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff23d07545c6bf65617bc3e8cda0cc53db851598795f0b98762db3ff60fef82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous-beige-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c394683c3a56d492dc7a409254c3ae7d7f5000509e733976b71cdb97b8dce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-beige-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4ed90522d6b1861df6a619715ef2cd213638a2fd3371105429e7af170f81fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138901 Malicious code in nursing-amaranth-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503f9be6089338f89c0efa27e1dec4c55bbdbff9f241c775be7e311d99e84a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy-olive-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fe395414a455d1f5ee1d3f47b24fc95e181fa1989275b8438058bb45a61f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139086 Malicious code in unchanged-tomato-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7c3df03d5d11071ece7f3d6a02d6d287db936e19a518d6b13433fcfd3df1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged-tomato-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7c3df03d5d11071ece7f3d6a02d6d287db936e19a518d6b13433fcfd3df1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...