MAL-2025-144851 Malicious code in mensa-foundation-apex-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5be0fc327e8e38982be98ae04183db050f3f4b08c7cc0af9727c9c2239019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142951 Malicious code in global-toml-vuepress-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a8cdb722e96e67d2348f504d26379d9b7b8862df3266e39cbf1756954a7aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141361 Malicious code in csv-ultra-wezen-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1858d3c966b6f580575064487e3a89444dbbd196a7324183c8b834a2b42ec59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148039 Malicious code in soap-vega-hydra-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe645bba34b0e4e8d58c3cecb6d63b49c6452156e804d022ec335a18e9eac1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143247 Malicious code in helmet-convict-mongoose-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d4ce360d6978f3da95d7633acc18ab166ce172a81582fdcdace275d580b59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-wolf-subscription-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac34b37db8f5230563ed1d7c9aca5ba4992c6274148ebc27c70174dcc389fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-epimetheus-rate-limiter-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad9c1494c426eb22260ef16a91168d268cb9fd31c3e614a913bf3df717b7dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147013 Malicious code in radiant-development-eslint-plugin-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293c42ba0700755d809e0cffb5dd4eee0f25f2209932a17eabac567d484bb08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-phoenix-antares-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956a174c13c0490bf7e9a7ef5873ebdf96a8566deabda32f029f8357f56acc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-enif-scripts-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a88a2d92d1bbec97dec9e6e2c4653bf050e9a037ea9989b88419bdac73c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-hydra-parcel-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489671468c3b3bbbaed96e23a570df1dd1327928a57ba7af09270775777d457d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-quasar-andromeda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9782604e3784bcb5e592be57c38e46ddb5fed0911cb299819acd350f717316cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-phoebe-octans-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f9f502b1d59b7d8c24fb7e93794207cda5d02230b9215234bcf41b07283d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-mysql-mysql-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089dc09fc9fb3f57c1f9e78a954418a64a29db65194c700ebe3e78748d414fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144425 Malicious code in link-solis-promise-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3c59989ecc8eae4a83da38af7837d57dde9a10c501c636c5a57588afabd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-rest-slides-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000bc6d60c2e882024d14774757d45f887e1685e183159005595d91a44a2f2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-supervisor-semantic-release-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca5cb99f5d1988c28b92f7426f9594a34d30f68949c8950719d17e65f59c3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-comet-kaus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19e35c748b77d4b457b3cb6602edbd409762762c7000fa53eba59cea78c3b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140249 Malicious code in bunyan-nestjs-gravity-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2945766e719b272c5befa7d59051355b159245ccff670eefbedbfc435046b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-ganymede-aurora-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e90255487efd08bc6f593e89aa88ee9297b0baf8b426b7ca816dacd1f45ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...