MAL-2025-144189 Malicious code in koa-dependencies-jabbah-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5750ce85cbb7e819fc26e82ac21b47a1867b190764e04914ec61a42495f474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142144 Malicious code in eridanus-fusion-winston-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587ced6ac697af9ec92ae7d115159be34cab4fb8262d2544a3e74c01fa52f209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139583 Malicious code in ariel-corvus-event-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6634e6e973158deed32f962021eb150569df92258f47d2f426368fdc00e9b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142780 Malicious code in gacrux-publish-tailwindcss-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d37f5a3c4214caccf7c82701f651d7efb773236d74e1fff5946573dbc65889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-server-jekyll-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae00849917075b7ff0a50029a91669d6550d116557fba279eb8d538fbe4ef6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-atlas-ophiuchus-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cf5a6cfe972b72ebb9d35d0e9dca13f2661913f52206351634dd057bebb6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-miranda-iota-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb652e8edd6e45f3edc03a5a3cdc6e3175c55ad095fa5a223aaf9e27be71c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-polaris-husky-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7098c4c1b22a10dd90a1bb7df8545761ba7543d1ef11f03e4ac41c00f39e2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-prompts-venus-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099ff1eaceb6ff93a26f3e4896f3492526122cbb96d49d532a67135b00209a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf8a0f3e47fb0a4d035bbab3e87f2d08c738bc482b0680f20049920a2b45498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-async-dorado-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a64b7109b43ed1c0f9e482fa31d66941c4902b2c0b896b79c946b9f4802507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-repository-json-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcb7a850e0ae08b7e3a37d138c9c493d2f4702ccafb36b240ecd4bbfa903597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144179 Malicious code in kinetic-nestjs-callback-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabb75f3cda79dfb4d37dd81312791d51764f7ebe791b33d5506fb7b9068b493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141771 Malicious code in dotenv-safe-postgres-perseus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118c548fba36106c65ab5a4047e37654324785d2a7b091b8c04a743d9c47bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142174 Malicious code in eris-forever-nestjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1406fa4bd80fa829b6a7321e56951c0d3568b801f7775b62e7a21d9f256495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxy-semantic-release-auriga-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d3fed4f83d961b8702a5d20149d2721e2318a9e39ae8feaa081ad159467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139613 Malicious code in astro-phenomic-yakutsk-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461199e72607e728901321d9c389e62b9c84c9d09c748e5bc6c8b32c0f881eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143343 Malicious code in hexo-iota-release-it-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f83a9d526b35e0af23d3d425be9a0ef87caa366f722a9b99e5f69b23f8b7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142553 Malicious code in fomalhaut-spinner-capella-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0e8d1ddde0788381e96ddabfe8341e2ff22da6843eb0046ffd53de5dbc0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145446 Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...