MAL-2025-140793 Malicious code in cli-dagda-heka-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50ef1dd0c035a6b8d925ae3fe105e1d5534f9a806ea4b127e43eb8bf0bdc4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144558 Malicious code in loopback-mutation-sagitta-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462802e07ab661b8ece47a77f17dbb548914d1cfa70cd1bfcbabaa8d355d0c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146204 Malicious code in phoenix-pipe-luna-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442e56feb45790e8c8f63b2efb8281db7566c164250bc9f04efe45622367d75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149625 Malicious code in xanthus-halley-gravity-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2029e560f0f7c0132ab1ff4bbde7603b0ac509b73a32937e5180b71d67fd68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143441 Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148817 Malicious code in triton-ganymede-janus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d84855f4774d7e9b77b3a1750e1d3b87f1210412e2f75f70e5024ae188d902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141206 Malicious code in cosmos-eslint-transform-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7479fb17e9a5219733e5a679b2a6f500dc2f60d0358935e1b79955c8c2c8c2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144500 Malicious code in local-solis-spinner-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82bf7343369abc38fbdbadc5bb280fe5fe54bceb4c8dcb596a4f850e3392814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-nebula-cordelia-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fd084dd542b21def1987eedf23c9ecc771d99ce6b923f8b0c800a2d77ac8d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in happy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f94515d5dff50629519f5e6393d5eed968669ab722fc2fd5e6e257903b5d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful-gold-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d8d5c4d38a05689240024d342aaf289716b8999697a27e9d74e389c8eeb910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing-gray-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4e04041645ccefea1a7b4557022e36c1affbe69091836280e14d0184b2b7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly-aqua-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e11b87589692e13378e5884ac74613c33bf2d49738f658f6a26fe123f4a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty-fuchsia-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8438d011ee38f73f0dd1f577ba1d9db6f206750b08c336e7de7afffdf837893a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-salmon-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e57daa4a91a59fab1e0c4ecf22166834d63f9558ac43438608aece819a60183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart-moccasin-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863d5e0a7c3f3ed55de4f449b0b715916e1f5160bb989ea4d1065ef4bd24ea39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liberal-maroon-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404408d04ed10418987628cff8ad2db7384bf492d2deb3dbc9c014d9d6306348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liloyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fc931892e1340a03042f91e1ca48d04171168fa64ec768aed1aa592f2efd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy-copper-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fded966376ff399dfe1c722516e6366d118b7022d1d25fc856574c52a7dc382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid-crimson-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bab958e94e0c20206a07309497c85049427f209cd0030f77275c219a9a6bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...