MAL-2025-145333 Malicious code in nconf-winston-rigel-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57818656989f84e68d0cd7543eb5cd75f822505d7833f4de2347d782cea86674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139586 Malicious code in ariel-epimetheus-husky-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6ca745b3ae6a7c5e568f286f2ce2070de676f623f70d35a5d0b147f7ef59c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139913 Malicious code in barnard-nebula-altair-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d371224236e78d1bf077551b6a3e5eada33e7a51cafbbfc732804d200f8d6f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139996 Malicious code in betelgeuse-ophiuchus-html-webpack-plugin-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8a7d41267a9cdde6b8ba5d659fbe45a5fccddd9ef331442f4283e3558b4406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142668 Malicious code in foundation-blaze-airbnb-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38969f667ef862cafbec8067822a7b84c1f7bfce91e5eba9a51ce5e997bfbe22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141105 Malicious code in cordelia-node-sass-titan-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aba470b153d913a8363811c0bdbc4300aa4833b9a41af28b0d7a3c678ac301e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143679 Malicious code in install-mini-css-extract-plugin-test-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d47c46e0374aed5c5f7d4341c5a6a16c64a371572dcd61558df3ac91e327c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144847 Malicious code in mensa-deneb-global-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94006735c0fb8be6b84ac51781bc561692d741114695724b97d8ffc837eca3c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140401 Malicious code in capella-zephyr-public-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc49c0e5e70b2b1843f86a8aae0bdc87d16c02b994ab5f99a59ab51c8e9cc016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139855 Malicious code in babel-dotenv-mui-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b4550d497466f45bc06d9e4e770d04c9ddb7fb30f4c474a4901cbb0aa51c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148032 Malicious code in soap-promise-kronos-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532d9cdc455bc15e8e73766bcb878c564f0d199998e4ce16dad81a8fd1e399d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149009 Malicious code in upgrade-csv-gulp-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a880b2792a6069fa0026a9e74e70b5b41dc7ae0ada9b9067a2c3c1dc94156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-jade-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68604dd963ae18ba2aabf6cd072036bb3fcdd5a087756f0902a02d96c1967bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap-lavender-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3102ebe0d1b896ec2df366bad0530f730278d9f7483883ec08967534fa2debca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-violet-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ac1feeba8879a8b0966dd72f4c8d85fd73ddfcbec4bed1d55dbd2f6a2da3c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern-amaranth-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d915a045bf2eb60d8439b9e870b610aec56232db06f90092cf835d0c3362757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-peach-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e30dcc58bddca5b500b777db9473dd477874723af2637af2045b58fe4b702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138934 Malicious code in planned-turquoise-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c079c1997c7efb62118230f56ece83a39a085f88bd3f0593d50f394de802a7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139130 Malicious code in ytterbic-azure-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edea10169803888703d73cfa23200e88b15373a3dbd18b239bf49fac50a39c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138866 Malicious code in mean-salmon-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19747e08beef00c0ff50ae824663ccc2a186e08cef376c9a8b33a9708d7b2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...