MAL-2025-141561 Malicious code in deneb-ursa-karma-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b979dee2a65906b1f5f1bc4c9fc7201001a399c12ab05938d322fd1880481a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144274 Malicious code in leda-jabbah-exec-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9665f29319155c079ffff7417dcf3d0ea8b3d96b518e7331384270a81b06f975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148503 Malicious code in telesto-sirius-centaurus-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57249715a10addadb8754d180f52226096d2990307d50b42bc2fdde20b9efed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-dotenv-safe-prompts-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00977fe89791751a5929d9c14386109d623c440e9303ce064db9d658963cf4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-helios-pino-pretty-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028d29159e5f9101d2b2a1a011bb106477bee002fd2bb59461e1830192383036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-run-script-weywot-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b1e32708e609247ff12298f129e107d30ebeafe72b630f4eb6775ce62f1a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-webdriver-manager-pm2-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f846e3d65d5e5703d9a9fb9b98b8be41399db85e6feb68da6523eaea3c0cccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142201 Malicious code in eslint-config-inquirer-commitlint-config-angular-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1864a9f0a978b5307fe3bb4e9683fa2dad642b51c5213fba3a16a358a2a940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-pavo-lyra-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da28957920f07798c64c5a38ab1c1290b06db95caf3906aed69d60c3458f329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143040 Malicious code in gridsome-eslint-plugin-neptune-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05892523376040a7b321ac3278985edf9c519d65ebcbe687651dddf10f1f85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140013 Malicious code in betelgeuse-weywot-cache-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2953cfa77e2809a1d55c771acbaa6285de51f8076e72b37202759c065d6c827c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145748 Malicious code in oberon-materialize-markdown-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a2083b4fb84ffe9e31011134778fcef6d65245910619783432fcfd3f6217af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146340 Malicious code in polaris-europa-csv-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3938c219c4816460cc37546a2fc49b42bd9f2df9bd9194194149724d94c575ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141508 Malicious code in deimos-webdriver-manager-public-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc1847b052c14b0eca3479e9583bc1ade4230f8c35df49331801119ea3a3f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141096 Malicious code in cordelia-chakra-ui-acamar-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe50038a951e8b1692ef49b02cf319688561c524d88b6c8447356cbde583c218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142029 Malicious code in enceladus-grunt-jabbah-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287cd32ffe0304dc3b78663929b5fb07c468c3593e8a043c53f160fac2438511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141597 Malicious code in despina-galaxy-auth-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316d9045e3e8076d3037b7e88e029d05d1a61786e6f3a223a912231e8e694c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144577 Malicious code in luna-perseus-process-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d111f25f7d0648db4294cabc196148f31f40a14e517a35702870ab1ddef6bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142207 Malicious code in eslint-config-promise-jest-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c4f82e6f2157597c61c7da8d74b237bb4130bc06799b25ab24bc0ef47a1d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145836 Malicious code in ophiuchus-pm2-framework-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428cd2acbcbbb702bdc7f8f4c10520454e89c610cc2f7b03d28763e6b1e6bb03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...