MAL-2025-148405 Malicious code in supervisor-superagent-helmet-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a59e3ffa2586423c766bb07341d62b23bc98f8b2d7e8b30bdd63d44e487e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148227 Malicious code in sqlite-ganymede-jovian-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e769bd671055035cea71893fdb0a3a7e4aa2012e5d37a9d0e0f609d74b13e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139184 Malicious code in acamar-pm2-deimos-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9dab467d508ab409b4e5d6bb31c1abb741e9efb26b754d9f2049fbcbf176f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144907 Malicious code in meteor-despina-octans-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae65bf00ffa8318ec13c12d88ff9a10b09717907e583c9ad2ba69fee6708f1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143001 Malicious code in graphql-deimos-vulcan-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87885cf83feab2e1c3534b6740d4189ecd601dc4c2079ff35d4a4da7bf0a1b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147856 Malicious code in semantic-ui-schema-kastra-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78ff75cca6dce1a6065ec67baffcff08f761cb7c53cc45a0ab0529a5d9b0bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146471 Malicious code in prettier-nightwatch-request-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae148927e5d7b7502bad537bf67cebc1408a2573a7de2260fdf5b06c39e274e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140945 Malicious code in commitizen-terser-hugo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2b8214a60a662a80a0f0137d8ca285913123c2808845be9f6d435e37b6af45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd5cd6e4b9659fadbfceeaadabe8b3c137cd2fcd97adaff2f97d46e62e1459d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-beige-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39d17fbc05146727718b7183b415c0f030436b57c5c075c75e935bc94e645f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless-white-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c01a2ba45f11193c6ab2f8a15a4a8f392c6e7ca344158808713a376df8e8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obliged-ivory-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f362365f89f3750073cc6692175242c5f2d5c361a74f6fd8942b5560b6f963f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-peach-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe24b2835231bfd3416f10fe31d8f7cd24757aa57cbf7b9f891783e9b4f0423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox-blue-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdd7fccdbeb5a8a860588776e90de4bc8e90a50771100a4fd66e0ab1999495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138602 Malicious code in bumpy-azure-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c5f81245c095a0db2baf7931861ca5afe91e1f67699c5758ac97ac1111fa71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138918 Malicious code in otang1150 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a79d7e22256c4d1c2ff8b5b9e5bbcf5b65a8d4c09b57516b13bb93089feb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138769 Malicious code in hard-emerald-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e44d60c14c51c84d88f48ff15851f928b0fbbc195366643a4d8c0be03783fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-klentik85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70af01c49815dbd726bc77847aa69400deb27c091152bd2d56336eadcd761e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inner_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df46ef6abb06de533eb40e23d13f020afab5817bd16a902015a21fc7404f6f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-taiwan51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429d57e07a2da91005e1b4f3a1bf84562324174d6d392c504b22bb78aaaa6284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...