MAL-2025-148320 Malicious code in stream-jasmine-global-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f686c5b6987f2ad2417bf9733e7e8168e25a0ee0b268d6f99281f71f3854337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147855 Malicious code in semantic-ui-pulsar-reveal-md-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48a80d995eb8677aec2ff6f9f1e190ddc765ead947e37559d1412568a96be99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148584 Malicious code in test-taurus-triton-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acc14dc1804cfa147694a6d92e847cb87147205f616aa2abcc4d79e60543204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146504 Malicious code in prettier-soap-io-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8f6b1234992cc9122d8dc53fa5c86ab2c85ba860f34355df6f2422a225026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149031 Malicious code in upgrade-sequelize-mensa-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0ff8cbb44b5e6aef3b12f19a391df695716e76d68aebf347771f7ae51fb08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146505 Malicious code in prettier-stop-query-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333c2e6a26a046e467d6256e8183f02eab4cd2f94d15be31633cbf99abc6db9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148727 Malicious code in tool-andromeda-kinetic-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd6d024ed78c25836f75684b27d647a8f118519dabf7f00a4d1a5feecaf5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143286 Malicious code in hercules-husky-blaze-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ed5a2f08116d37357f8074fb85d6e54dda19d5bef3ebb37179a4ab84fb0733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-nightwatch-jest-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc5ddba454414b66e34db5850c8df0c196c3aa804d39005db9e389cebab5da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-process-sedna-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a235a7f24e67687810456d7ae7b66dda61ce9fa354872de73db9c6e28ace3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-sass-loader-acamar-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024e65ec79d7989f7288d3e12f6dbf814e68a925b81bcac362beebb96db75fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-xenos-semantic-release-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f58e029f14585cfdc2fd0f9b661cde86502c305c7822ec44d6a8b06181e028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-relay-docusaurus-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca0bb13d341b2b03e8500ab818c3218b88e9a070b490ea0f91ea27b367fc097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-vega-jovian-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb27650578446fd3416420d1e95bf8cb40fbd3c2fbdccdacec4319841856f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-nightwatch-yakutsk-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35fa65ea2bd4d530b030637bffe1acb3dca16c267a6fd9f1f510158073ab3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-eslint-toml-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f249440ac1dc8f9e957617a2c8623846ef58e8783e0d3df5e62de25c9b5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-blaze-selenium-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ca898291f4cd05fce6b0768f8f6ca08ffbec4dd3bb7a9699d4b2eb9584daec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-pegasus-fornax-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3cd56da85ad1b157c8aaf46467c5c42f3a7eea259284a48f2e7b04f0741baf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-passport-eslint-config-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aebaca9d83597eaa315d6064a074b23ccc4564c49240edf92a50d5482b736c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...