MAL-2025-143949 Malicious code in jovian-hydra-chakra-ui-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11890f1057cd031f348255b194e3c7423681fc7aa622fb91bcc95d904fda02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139589 Malicious code in ariel-indus-telesto-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e010405cee714fc544f42d8632a9cd0c8322ff38222e8bb03224e51fc0cd1eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141874 Malicious code in elara-equinox-mutation-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef8049521f826b2e21d003c9a87c6a0373f5335fcd90d4dfdad2bd25704ecf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142025 Malicious code in enceladus-cz-conventional-changelog-slides-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c0b08346bf9c56d0ce926bc8bcbe0c8fba7e8a52964cc09a4318f02e8cf27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143520 Malicious code in ignite-nodemon-antares-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ce98fada83e7832d662cdeb2b40bb93a78fc8d8a1ca5dbcaa1dd92aff3b2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146539 Malicious code in private-protractor-geckodriver-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af28cacd8497956d18903394814923afc24c9c0f191933629f82b63a2f48fc10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139367 Malicious code in altair-soap-lacerta-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8800c382bc665757e646f163f105123c1e11b66071a5ba311e2158fb8762a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148908 Malicious code in ultra-shelljs-aether-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7346b040e81bb689df3bed542cce8811d5d73d35a48936f4312edb9d0c62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145612 Malicious code in non-blocking-kastra-eslint-config-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6733a63686f84a737c0a759a95d9448142cd5dc89513c785f1f746ab028b97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148614 Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f105b3dd515bd0a46c837e65d9a353f5440a1ee4d2bb6b1800b64e2f8b2cb81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144000 Malicious code in jsonp-lint-meissa-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cc0a698c1725ec64130dc90c940bffe2905c6de5e4f97b0c17e638e24af4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148286 Malicious code in stop-aquarius-barnard-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c424cf28debce1410577b469e5847a0ac3aa9b77d2504b807a03608e3d501ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147234 Malicious code in release-it-release-it-semantic-ui-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cd1c8bcdbc0ec6726484d622ff13395ffdefd0f82bf15de112474aae255b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141476 Malicious code in dagda-magellan-cosmiconfig-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42085eb6a4d290ae43995ee4eda6a85b47dcbb6ca580e2965afe4b477e91b4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149349 Malicious code in webdriver-mocha-grus-zenobia-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f7a9cdf7fc488f0521552c98a014b1654221c8d0232d763a1a6eb14445b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139556 Malicious code in aquarius-venus-nodejs-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc2e66c5e746f8022215dc50cec9024ea7c7a0932e369c235ebe321beb13fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145684 Malicious code in npm-nodejs-umbriel-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c976dc4e8caa65dad055cd3ea3b6bd8738c7eb21895548d493f81de4dcd32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142471 Malicious code in figures-ignite-typeorm-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba65ca8d3db100e2561aed3aa94db75191efee78aa8dc130f06a757666bd98d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140824 Malicious code in cluster-dynamo-morgan-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d84da019afb622dfa09353a9c9711f4741db22e7ebeb3f066c21ec53ba3faec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141210 Malicious code in cosmos-mutation-eslint-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ba4c4ab2fc046a741a48a61fd16f22d5f146a6b58e777157f13f0a8aad1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...