MAL-2025-141210 Malicious code in cosmos-mutation-eslint-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ba4c4ab2fc046a741a48a61fd16f22d5f146a6b58e777157f13f0a8aad1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145945 Malicious code in package-scorpius-kastra-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13206989ca281bd8486109bca034dcd43687f4928eaf2c88002dbd6dcc613c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141668 Malicious code in docusaurus-ignite-chalk-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ac628852778f49428df04f0f333889e78112037446428392da60d03dec11e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144000 Malicious code in jsonp-lint-meissa-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cc0a698c1725ec64130dc90c940bffe2905c6de5e4f97b0c17e638e24af4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140321 Malicious code in callback-venus-flare-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc23af055cefad148c2cbf98683998b9525982e272f70c25fcb1f3cf400a4b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ea2f6816e8ac0752b9542acd7bfb79935cb0249373cf5dc504196b617c0c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odd_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac14b7c26392d5bad1679af65d7a95c7e05731610ca16abd7d89f48b52250ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139159 Malicious code in testy_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ad1ea4ab735668fc4f7b7322268051d65b809c038a20b3d40b48899eb70eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible-cyan-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe01ec4fc7dd208e4229b84eb5590bc6e46631dc9d794f2d09949987fa726f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring-coral-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45c0fd356cbfe0c2f97fbaa684dde368d7049a30f8c0cbbb9f17d877a81e8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry-chocolate-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce4ed9a19e46b14c01e8546d308d856477d11f62ee36d04d3ecb582b270bdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in furious-coffee-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f34ba239c827981f1b70d30d1dc39eda68b32d6e379a238557ae9cea6fc1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole-white-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e709f6ad7403eb48939931742b4a4b1e9e734e09eacab6d321e561d29816952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-amber-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3b81d04b3eec8d7f7df1055c5e60213c983872f9d7c77f0b56a5b93294253a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138834 Malicious code in liberal-maroon-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404408d04ed10418987628cff8ad2db7384bf492d2deb3dbc9c014d9d6306348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138862 Malicious code in mature-magenta-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de26faa67ad04b9425d716aec4c78ec2e19bea135d36c63fba463a0075d6c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138981 Malicious code in revolutionary-cyan-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24a4fc770dffd96796dfb947b21138e36338d3ba6abbb7baccba46f8c1120d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clever-gold-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a98a2b6918c5f0eb5343a6c74c474ed9140c1e3673674306de71f0151d1902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-teal-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac3cb5d867a1c5335e2448f597f0c48d03822b24c98e92b0d7bc9a50430d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact-gold-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd089cb204e640c0a045dbc093fed6b80b99038102a240a1b691c1be42922408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...