MAL-2025-139408 Malicious code in antares-equinox-semantic-ui-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd5fed7ff9a700123815739d80aeb235f0417ed6c7a5251ab4cc8c7688a8c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146944 Malicious code in quasar-cosmiconfig-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76bb28548534fc01c9b0261f4267dbbec430eb9d246820b1104a172a156064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142386 Malicious code in express-module-dione-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746ff1eacfa26ef921d0bf5f4c8534d65842edc5283b1a692ecb6d1364145442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145631 Malicious code in non-blocking-writable-soap-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d6bfa5c0d577f0ebf3c7294acf34cfeac91f1b22fb6b71b5864ec0edf86df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146734 Malicious code in proxima-quito-middleware-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475f449d7bd5dce4851ae837b64f10777414bd115d80a9416776f5418ac55b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139485 Malicious code in apex-request-relay-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d1817134d21724214f2fe946a873bdffacb372c5d66c6abf5cb9f37ed49b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140108 Malicious code in bootstrap-husky-meissa-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e0ad3e15e523571fffe4dde2372141a4ebde58c26b4302b395220c7bd8915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144965 Malicious code in middleware-uninstall-dotenv-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c719f45873e976f68fa0b1aca736a2f137187f56d884006306fe80b62893db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149300 Malicious code in wasat-rollup-plugin-barnard-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1d3a097aee4609b15fc4c6a04bc8046148fb34d51616334442d6a7c9b927e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149081 Malicious code in ursa-xerxes-betelgeuse-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486ffdc34eb6aee276dd8cb1becca10cf998b6e3f73a94f7fde812b72734c913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145581 Malicious code in nodemon-geckodriver-mongodb-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e37566e323528314f2a0a3e9907ee8ce68065ba9a7899cbe3b363638ee7870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147355 Malicious code in rest-meteor-avior-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b593dc927cf13c092f584d092b411a6b234135bf7f519c62bb07d14563b124c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140190 Malicious code in build-readable-react-bootstrap-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e775b6d0ca701f5683b2d7e970cdfefc9a9d539920c94864c59683252009ab1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146502 Malicious code in prettier-rollup-plugin-astro-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfded479fe2ba4f61803733a27544ca78184e1d770ddb07750a38a7985c66b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139225 Malicious code in aether-buffer-uglify-js-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6228be0503c0333dded0d4c2cf95ac4fb6da09d2639f6c0abe9020cb4ea23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148265 Malicious code in start-bootes-upgrade-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fea5aa58c72e3941a730b746949466a60b185f0427bbb06e45fe721118d4cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139955 Malicious code in bellatrix-resolvers-inquirer-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858faf8874f21966c54d66bc8f4a8694de8c3a9272f66dd24323ebaccffce5d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143357 Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142738 Malicious code in fusion-jwt-eclipse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276ba37349ef51c2496f3657d01bc7a3a3d0a9152a6d37a144b42229df1956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139593 Malicious code in ariel-ora-farout-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2499e2c6d1cc3c2e72747a240235163a36b37210b6a5635bc43e1476a8dc32ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...