MAL-2025-146560 Malicious code in process-nashira-alphard-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d892e0621ffd010621c749e7224836ac446d06f96c997e37d0d3e3eb69033e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146499 Malicious code in prettier-plugin-markdown-xml-ursa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bc7b7aecb7e4c96ec7cac92f48ff77c3255685377d2d2afc077e1a4505538a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147910 Malicious code in shelljs-chai-remark-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140964 Malicious code in commitlint-config-angular-global-dotenv-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0be1e1d6e170b61cc8ee04047225ecf8b867e4a7aff9a05bc72b7e10f77f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142259 Malicious code in europa-child-process-link-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22975fc0b1cef30e326d92c69dd05052e47b7277630c2b57b0dcf5e1986f379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149591 Malicious code in xanadu-child-process-passport-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd74c22d0aeaa7681ed0d073575724c68f031589b73e3a31bcdcc4eea9ef361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146275 Malicious code in playwright-chakra-ui-ora-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb0266ca44973e7f581a1ca837ea2cbb93f27166c19480130fdc58761e03ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147795 Malicious code in sedna-standard-element-ui-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ce0f3bac1b17d65b475013075f790254b11c5a89bf35d1a2c597f700d9e42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141007 Malicious code in concurrently-hexo-weywot-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc8cda0f2eb6119ce7dccfd4014dedc2aeb7d4453e9ef894324d158b657e121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140157 Malicious code in buffer-gatsby-less-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17d501af7a70b3a645083209e4b5ddb87b03d3ea34e7427b64b6b2c2dc89b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149236 Malicious code in vulcan-gravity-carina-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2255b2533f27f07d85f1f3b076096769c811f06d89dbc0fbabced78c2c5c67e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142466 Malicious code in figures-elektra-server-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbbbb9b2520c1478dfb726fa301de4236a1b2513ba8a3919ab86d5228a7ead2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139270 Malicious code in aldebaran-celeste-fusion-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d449687758ea4d1616ccba7f7691ab128718236e5a1964552aa9a1764a7dca3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141538 Malicious code in deneb-centauri-pulsar-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6526bda239de64c4d9457ab972fd6ad08c667ce2fed1a79a3cf3f4a444fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139154 Malicious code in sensitive_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66410a0bc1e30fc0454724628ceba7714eb23da1d2d92889673e46b130e2946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f8abc8d4aa9ffa2fa444ea71ccde61df434e0d48387cefb28ef5183d25712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139139 Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139133 Malicious code in breezy_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6fab2173a7e33e37c325feb876bfcc3a7690d12c4313d99bc2ca5861e5c27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intensive-blush-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5e8beb11a3148d321a00d6171dfb5dca236febffc4bf6b5b3b302be4dc5c44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138736 Malicious code in frequent-crimson-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a6facfca29c6ac2a7ed67fb8d73c51fdddc074c47b5253fe74da6a1e16fd54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...