MAL-2025-139303 Malicious code in algol-pegasus-fornax-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3cd56da85ad1b157c8aaf46467c5c42f3a7eea259284a48f2e7b04f0741baf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146992 Malicious code in quito-firebase-supervisor-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a09f7f0d9ead6a273ab5178cea56b022f83751858faba9668dbe82686d7978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142188 Malicious code in eslint-carina-forever-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f91ef5dc4c00f9832c98df57115357c304787af3987b4df8eb1f049d795218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146770 Malicious code in public-supervisor-semantic-release-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca5cb99f5d1988c28b92f7426f9594a34d30f68949c8950719d17e65f59c3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140464 Malicious code in cassini-epimetheus-terser-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d6d8fbe53d92208051c449b0c2589e7bf14cdcc34c85e706f46257023b1c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140877 Malicious code in comet-jabbah-airbnb-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f66b30b9c620662089edc15175afac4ff8902761de404a5e35d24b444ec0ada8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141175 Malicious code in cosmiconfig-cassini-commitlint-config-angular-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38aba14487f3c4660822de21e0a59285fc43511922d5069d9f422ed261c671ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145422 Malicious code in nextjs-postcss-galaxy-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5546276d3b6710db29e003e3d35096e0f4ec408654685b966043b94a6f2e55fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd5cd6e4b9659fadbfceeaadabe8b3c137cd2fcd97adaff2f97d46e62e1459d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obliged-ivory-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f362365f89f3750073cc6692175242c5f2d5c361a74f6fd8942b5560b6f963f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-beige-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39d17fbc05146727718b7183b415c0f030436b57c5c075c75e935bc94e645f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless-white-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c01a2ba45f11193c6ab2f8a15a4a8f392c6e7ca344158808713a376df8e8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-peach-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe24b2835231bfd3416f10fe31d8f7cd24757aa57cbf7b9f891783e9b4f0423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138602 Malicious code in bumpy-azure-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c5f81245c095a0db2baf7931861ca5afe91e1f67699c5758ac97ac1111fa71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox-blue-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdd7fccdbeb5a8a860588776e90de4bc8e90a50771100a4fd66e0ab1999495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138918 Malicious code in otang1150 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a79d7e22256c4d1c2ff8b5b9e5bbcf5b65a8d4c09b57516b13bb93089feb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138769 Malicious code in hard-emerald-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e44d60c14c51c84d88f48ff15851f928b0fbbc195366643a4d8c0be03783fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-ronde69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d74f4048bbac8408b3c1bf5ac5f6754975662c7749ce82d4d3f08cbd4cfcda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sambalado68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef75601817c581b247860b5d7ae3494051c6408667bb0654cb2665c8be6b3853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-miemee57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d385765de160c7ff097e89143f9856287ab75288a9992fe64968a9c617457e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...