MAL-2025-143672 Malicious code in install-config-hydra-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276ed3297a64726866fd682b9a60e6b8eb9375954fce02ecb2c46cb27181a072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148887 Malicious code in ultra-auriga-gulp-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b10127eb6bbd47a6636d78d2cd1db35c4ad4337006d511d902778ae0ca0b050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143935 Malicious code in jest-solis-aldebaran-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46f2c78e342536e68a4c350a5c3dd11443b5b602f6fe14b57565716a0de7390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147034 Malicious code in rate-limiter-cluster-react-bootstrap-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5333dc0e57d62591cfef78386ee083234837b5301edaa9eef17a22523a23050f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147562 Malicious code in sadr-hyperion-process-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf4d6966d2840923341cdba9ee04e56a003d53e675e76dfb1440a4e1b2c0800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141004 Malicious code in concurrently-deimos-scorpius-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417930b3a430052e342e5f69a99cbf6ba77c60440316b9ce057c1d09105f7c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146751 Malicious code in proxima-xerxes-await-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5410adaf1035021a86a15b259d7ce60dc0365d4b361a661abd6d2fcce409b986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146925 Malicious code in quark-galaxy-phenomic-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a4b1f7525377ddda748540c92b04a6389627106af25100a29519c83625274f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142349 Malicious code in exec-less-commitizen-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99abd01217e56aebbfb133b6b43794511bc65b3e048a0bb58821ba2d7898bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147224 Malicious code in release-it-hyperion-gacrux-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde1932bf84de464c22989333e926d6abcd2b16e583b5214e412410b33fb16fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146627 Malicious code in procyon-xanadu-carina-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6470c43bd30eb473cf516e28c2579ba27275297d6db3414d57ef6451ac3fbe11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140906 Malicious code in command-hermes-phoebe-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a388587bd7e5fbaee3160b85a520b4d51f8167dee7b9713177988156d1ad40ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143450 Malicious code in hydra-pipe-lint-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8bc7b83100d9034cd6ba13dcffc904a47fe59fa5d8bfe9e592b2496d9493a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143031 Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143895 Malicious code in javascript-websockets-neptune-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40c1fc54cb251468d40fb099bef3a0d38a64ef7923792843c8cd11d5e3554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144558 Malicious code in loopback-mutation-sagitta-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462802e07ab661b8ece47a77f17dbb548914d1cfa70cd1bfcbabaa8d355d0c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143910 Malicious code in jekyll-nodemon-lint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eed5e8ff22cc9239cffa973753ab2ed9b0ef01e31a43a734b87a8a922d04e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144973 Malicious code in mini-css-extract-plugin-cygnus-centauri-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d35351e2e3b1eaf852726b159ebfe9175b18a5dc8d25b9ed730e6f7b27a8103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147561 Malicious code in sadr-hermes-fornax-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e987d54b096a7726f59505fb5fdf043aa1936601415eb013eb1bc52ad13ba607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147787 Malicious code in sedna-postcss-gravity-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4518a1db3516a32330ad1a98f283c25f4d297b1556347a4e89b67adacb66de53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...