MAL-2025-139832 Malicious code in axios-karma-mensa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410722a9393688cd5d9c27ae34b34821e0521572820fd9dba34e1116e0e430f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146777 Malicious code in publish-carina-centauri-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c07122800749f613dd46f580699227bc1e00d0069027dc2215f340c2bb00f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139981 Malicious code in betelgeuse-fornax-europa-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12df85e55e17f239ecb02ac68f2e4aeb2274a82da624b7659364d84ea6c5165d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-achernar-helios-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78d836027b3386068716b796b3c8b1931f3c424a999bb8ecb693401a1ff21f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-oberon-framework-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5717df4094340a3b32dc4b99bc68bf22c3d181bc748aa862add6b2fd0f2165f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143899 Malicious code in jekyll-castor-dependencies-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c96e67c6ad324876e8e775f06dd8ca2818411b3b50df8dd9368f502dfce5e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139978 Malicious code in betelgeuse-eslint-plugin-socketio-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe0ed93a195f1e90b9597a17f9ae38aa7a191ea284524761064ec0713b9439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140666 Malicious code in changelog-cosmiconfig-sass-loader-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a3d3ea8d49e0103a6025980fe2ddbe0f3fc5fbfff21c014343f67002004afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140026 Malicious code in blaze-morgan-phoenix-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f2730776016d8729f42fc992941a569b95e90a52a4a69625b5a6d6d7a60a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147650 Malicious code in sails-juno-bulma-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce16bf78b475495a344e31c5e78a2d193669d6ea105e1337bca03a3af58eeac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-teal-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac3cb5d867a1c5335e2448f597f0c48d03822b24c98e92b0d7bc9a50430d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact-gold-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd089cb204e640c0a045dbc093fed6b80b99038102a240a1b691c1be42922408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible-bronze-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478321554144be69d7f8d6708d8b4a9e4a22186aeb47f821a209a9b0a9a7d4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-black-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12317131eeefab57a8a0ef18143ae04c2c9866ff86e5d5ceca767ab54a9015cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138862 Malicious code in mature-magenta-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de26faa67ad04b9425d716aec4c78ec2e19bea135d36c63fba463a0075d6c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-taiwan40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094922c939d2c8ef51630569e3f6823980fd60d01f1c3ecf758bf62a3ca6e7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-ikan17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1531c448a9b13a941ca1dd0339718f221ba3265cb604aea5def8deaa4485e80b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lapis2-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2164327be88c7013492c07c9785f090ab393f0fcea293206b7a037743539b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-tapai60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f55f176c02e6dd30b7538cb3abd4514d2802de944aa32d0532a6d533866e2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tek67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4faf984128d68411163f6ce730e0426b9e65f7d7c0cb7be888da123a9e6799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...