MAL-2025-148207 Malicious code in spinner-postcss-loader-yakutsk-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa951d4e8fefccbc6733471ff7a7dce0e3e54f085f384cb008888206fb1298a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143731 Malicious code in iota-jupiter-bellatrix-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463b4aa78ed38b448c61f33a100a1d5b292882f7610f939120e76e54d75b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139713 Malicious code in aurora-upgrade-venus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951efc2b516ca82cd5789c5c2dc66c57bc2c3eb4310668eb2b8e0a6946021ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147389 Malicious code in restart-procyon-apollo-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42e3571477042a427ea800803cc8cce7743f22a2f72d8c43432ac8fd4a5c96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145231 Malicious code in mutation-rest-mongoose-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0a079ebfbf35826223a4ed7a0397e374dfc04468205ee22c2a20a8b5d25fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142083 Malicious code in envconfig-package-socketio-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f915e092e9aa33d429080d892b1bb8876a6c35d98508cb80f9051d0eb83f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143902 Malicious code in jekyll-dione-algol-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ef01a55cc9f252b9910c70276e19577b4b009d210eacfe3e5510edb24f8c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147336 Malicious code in resolvers-sedna-callback-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bba612a2c27396bdd6c0082f37a7b31d445c50826d26dc620a866316eefb7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149068 Malicious code in ursa-phoenix-webpack-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0778f1068026d84c80059775ace98837d4c0ad76ac7c5bf4886c84953646e947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148899 Malicious code in ultra-init-spectron-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad226bbd37d46411f9e7995bd9f5fe514fe041d07fd02d014234018cf2df8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149884 Malicious code in zephyr-epimetheus-leda-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93bd7f26a0d6052f2458fbd2a4d3a22ce879f801883dec1ed4265a6116b6f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145401 Malicious code in nestjs-proxima-lyra-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3fdc828d51ca9f29e59b72b62dd31866819155bfebdd1cf1d0c0c07f6369e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140007 Malicious code in betelgeuse-spectron-npm-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a344d0834e6ed996d83960e9b60ac999397f5a12d6a04089e3492f5251b0cb0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149088 Malicious code in vega-despina-fornax-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda7f176adf19a4261e175122a6f4495b878feb8454526943427501bd6d849cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145193 Malicious code in mui-altair-winston-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec698e61543ad380ee240f73da03f38591755503d7151b0f7073d3b8db12176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145898 Malicious code in ora-style-loader-miranda-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7adc4b81369d78be0c306888de6a7958b95cae36dee66b5bebf086605344d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142676 Malicious code in framework-astro-library-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef35db8d4a04cadcdd6e1d033c10b92183e380161dd5773465e45152621bf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147433 Malicious code in rigel-lint-orbit-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38cdb45ce2c006f7a290eeaa9ebd89179a65844456fe247adb34b597f3473af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140141 Malicious code in browserify-sadr-writable-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f47a4f4423c22a74e9dc21808416e8e2848da7b569aa21cb9d0bc7e67cecdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145005 Malicious code in mira-convict-element-ui-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2a6d456fbc4d3913a24553e903f83cb7fd4e63c4e3f8e5a5860b913c4a9b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...