MAL-2025-148255 Malicious code in standard-karma-markdownlint-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9695934231691f2b33a0f68d4712427a228a65acf1aba1be1eeccbe15c670048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139274 Malicious code in aldebaran-elektra-alphard-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7d22533d420b889973435226c3b0b684966479192d793f2fd1b62ba75ad695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144679 Malicious code in markdown-apollo-transform-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db4084e821d24264fb92353f0cffb2bb312a7254a0f0a8069c3ffa278f517e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140804 Malicious code in cli-node-config-eridanus-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c9e5f61f95bfcf4d2b38af3999e0c0645e84cb36f4d520d8df699b673e6970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139832 Malicious code in axios-karma-mensa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410722a9393688cd5d9c27ae34b34821e0521572820fd9dba34e1116e0e430f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143899 Malicious code in jekyll-castor-dependencies-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c96e67c6ad324876e8e775f06dd8ca2818411b3b50df8dd9368f502dfce5e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-yildun-karma-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002463a9ef23a3781a6864d5ad3a340c5c545b7720c5f79a22a9477e198d67d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-prompts-hercules-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a51660212c8f8e17ba061c5d3c1287bece955ade4374abc8c6d27c3156ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-aldebaran-eslint-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b3d94674faa2d791badc098c041f3b61d7592d45cedc12a36f44ce3b39077c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-regulus-xanthus-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623f738fdc461b8c38a39da3044e89eb5ded72f45c346f84c268af6fef85d9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-parcel-mysql-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4600f02aa1b42d0cbe2f15feeb35fe523685db00d9a4672ab4254b84fd88a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-vulcan-lyra-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed292ee6936e0ee5a9a91b3777a7aa416b690ccdb583cd9256d7c33814053dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-dotenv-safe-chai-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a02bf129c422cf91f95f6f735927b5be16e5aa0a264e7b197ce7558b296472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-sirius-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaf14e6e10cbe5a3b607dee0e7b57551519225a5dc3ef21ead34231d78cbdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-forever-grunt-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09265b46fdf433576f41f7f12ba7ef773b4b643027adaa79185d07f1850e0e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-testcafe-koa-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ba567e6bbedaaba4579cca62d69d9473426445d875a51b7d5ba3fb7b433575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-dorado-reveal-md-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02083361929600142cbbd362da8df6c63f05a2d0cf83912d9c9c02aae394daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-meteor-hydra-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33770dfbac66ffcb26f1980fbf651debce846bbe4d0a6c950d36e990f3ca549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-zephyr-prettier-stylelint-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e0bc5f74d9334238f6e4593bc4bbeae0f83fc66d8a18c2709882e19e7a5326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...