MAL-2025-140056 Malicious code in blitz-pm2-mutation-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9947d7d777aa5109d31e05196cc3ee49ee24d523164a0c11029270bcfcfb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147300 Malicious code in request-loglevel-webdriver-mocha-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fa227c4b682e4efbbf01ad0a3de65c3e135e1af06ba4b2149f3f53c6bfd3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143679 Malicious code in install-mini-css-extract-plugin-test-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d47c46e0374aed5c5f7d4341c5a6a16c64a371572dcd61558df3ac91e327c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149767 Malicious code in yakutsk-electron-request-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e539cb02c91ae228f455572ac5991dd7b11d2b868b70f0070586ea8fd26a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141834 Malicious code in dynamo-parcel-helios-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca8b68bffe089827b1bb978a267e2a3fa9a7fa61f0fd932bb4bee41b458a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139227 Malicious code in aether-cache-telesto-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148762 Malicious code in transform-dorado-phoenix-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c06dcd35b1cd056dad87509186667ba2544e0b69410c71587604ce328274f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142382 Malicious code in express-markdownlint-koa-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5af99872602a5f7cbd6edad3d03e0270313304601d1cdf9cb87cd3089c9e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-flare-loglevel-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f4bc63028f7bdf21b5dde2af04c7dc1efbbfd1ddf8c87aa557a35e399bcf6c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-sequelize-blitz-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2346b0bf4861676926585e3f847208430f9349ab412d1fe2e14790ddaa9c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-blitz-jwt-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad40f6b4c653a8d4b76f65b28575d51152312e7a0a56ca06c6229c9f07afcde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-terser-rimraf-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85c5ae642215aab8b0b119876bbc8656b8061b80381484e9e2b94aa377a65f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-yildun-corvus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71389884d84d46c7588e1f5e417d4d265853fc74c19a59cbe8fe39fb0d0c3d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-vuetify-remark-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4ab0c7dabed0380a75ca522101b625021814c0673af71c00022ebe48e46658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-pm2-middleware-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545972211a2bc326cdd56d631b2c8d1331eb9494e29039e8cdcdc3e098441ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-wolf-test-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8011e9fa7911a3c8ee4489e790127e7dfc9e840dc8bc4f3c36d50a3a500058de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-child-process-xerxes-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e764918f26ac7cc377b1b33c32bd3f56120a8f487b5adf3b2d817e3582cd07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-html-webpack-plugin-izar-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5b12b6bff5a1d345f252be0db66d506247fc87ad6a553fc02b7a9aa498a52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-library-ganymede-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a50182cb5ce9b9afb3fed1228d3caa54c2a273e7c272ab4b15aead9a5fba33c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...