MAL-2025-143902 Malicious code in jekyll-dione-algol-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ef01a55cc9f252b9910c70276e19577b4b009d210eacfe3e5510edb24f8c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145401 Malicious code in nestjs-proxima-lyra-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3fdc828d51ca9f29e59b72b62dd31866819155bfebdd1cf1d0c0c07f6369e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143243 Malicious code in helios-xml-restart-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d63dc75a03aa2141802b7321311b220cc5902d8579b24371b901d0696be92c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141689 Malicious code in dorado-janus-kronos-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25293abbc0f55b25ab066f875885a6f1e841700975ca5d58bfc31e4ffd5baa10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147092 Malicious code in readable-sqlite-lint-staged-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e86395f72b0d1c4ca3d9c82e00d107b76b89cc287e27a646f1d01fa40c79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-package-remark-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc18aa99ef75cba88fde8f564a276ae4df269c350baee22f312d7bef7dde888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-charon-triton-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e315255af8ad80e64bcb28a2fe57e4823a3a237ddc35469324e0c3ce7b1f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145126 Malicious code in mongodb-element-ui-apollo-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df498ac200d33b3658c343435b76d30ef4636d8e58ef7ef5f2623064879b17aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146823 Malicious code in publish-writable-remark-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec46f6e0858346720b7801097d9bd08d98ef8206557f600b699449748cfdbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144110 Malicious code in karma-heka-shelljs-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1321402d373619ab428b9424583b9f795bb5713d9ceb5a919bcf553760974a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144382 Malicious code in library-package-chalk-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdbf6ed92e296a6b26f565bd7396b7fc643e1dbfbf8898ee400257e63159361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143731 Malicious code in iota-jupiter-bellatrix-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463b4aa78ed38b448c61f33a100a1d5b292882f7610f939120e76e54d75b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140247 Malicious code in bunyan-mongoose-protractor-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da03fc5c0bd9e4ea7622a6c29059265a630fae7403a1e904ce875bc56985f34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142200 Malicious code in eslint-config-got-loop-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cb477ede27d343847c0229dbba4aa87dd19cd561a5a0a308a91b247ad68dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140567 Malicious code in ceres-helmet-wezen-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf466b18144d7948c134657b443b0a30c97b236683cb3ce5a18e23c2157c857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145558 Malicious code in nodejs-cosmiconfig-mysql-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d0654beb1de2166c90609ad1eeed5e8ee76eb4848ea427be5b23c211714a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147342 Malicious code in rest-colors-xenon-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea9c8aeb5c94be268f5eb954b7f3da9be1607c0683a980ae34c42e812feb1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142761 Malicious code in gacrux-dactyl-celeste-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af762c09d8dd6efc667093f87bbe59e23830d072f15c7020ef8e9eccf43d0923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145722 Malicious code in oauth-bellatrix-chalk-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffad45b9b9432e62d0de16da747be275e74f7ff81edc924f259c69ac8464b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139300 Malicious code in algol-markdown-halley-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7abec0a1e0d1bd6e1a3f5a47c0ff1c8105d1d1f3a957783903b664a226c7ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...