MAL-2025-149513 Malicious code in winston-neptune-vuepress-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b712155c96b30a4ed41560b5bf64d0a1e0d4bf7ed6f5d00344ac8204ffaccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144442 Malicious code in lint-jupiter-prompts-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76f5ff174315c9b4ec3a265e122cf8e22e1c0b6891896257cb53e5174d4e62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141193 Malicious code in cosmiconfig-prettier-plugin-markdown-yonder-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e91001c644db002183bc0aa1ace65a08d0aeedd08ade3f1f02ec3174c2c80f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147650 Malicious code in sails-juno-bulma-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce16bf78b475495a344e31c5e78a2d193669d6ea105e1337bca03a3af58eeac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140097 Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148908 Malicious code in ultra-shelljs-aether-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7346b040e81bb689df3bed542cce8811d5d73d35a48936f4312edb9d0c62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147234 Malicious code in release-it-release-it-semantic-ui-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cd1c8bcdbc0ec6726484d622ff13395ffdefd0f82bf15de112474aae255b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139981 Malicious code in betelgeuse-fornax-europa-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12df85e55e17f239ecb02ac68f2e4aeb2274a82da624b7659364d84ea6c5165d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147374 Malicious code in restart-changelog-heka-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4e9d744ae94327c698804fe82966dbc2351c5296bc154d46f1937541b8f1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143166 Malicious code in halley-semantic-ui-proxima-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6f4cd0746ba42cd6e48559c37cd5c225b99bf94116ae4eca429538f9bd221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138862 Malicious code in mature-magenta-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de26faa67ad04b9425d716aec4c78ec2e19bea135d36c63fba463a0075d6c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-teal-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac3cb5d867a1c5335e2448f597f0c48d03822b24c98e92b0d7bc9a50430d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact-gold-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd089cb204e640c0a045dbc093fed6b80b99038102a240a1b691c1be42922408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-black-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12317131eeefab57a8a0ef18143ae04c2c9866ff86e5d5ceca767ab54a9015cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible-bronze-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478321554144be69d7f8d6708d8b4a9e4a22186aeb47f821a209a9b0a9a7d4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-pisang3-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd929c100d91a6a2f47dd17c45e60220509e0a41f9db40a21f73083bf9f9d423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-bubursumsum54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4dddcc0d0c93eb0e1e3e0be7b5bb17cce2b7c8e249e0f31287064c78bafa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-mangut83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 363ccb34e207af1d5362f4cf01c98f5c8fb475fcf64d4d5b306660afc303ac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kemplang63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcb0d3be0a933fff2cc6b80e5bed00703d39ca83c45e724ee508fe3893cc63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ikan86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cf99f195eb0ddc1a9cc1bcfa34f11268aae01d87a89cd8103beba985b662fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...