MAL-2025-139842 Malicious code in axios-virgo-registry-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15200d0c006ec0dca8523bfb533339e3be63eff22858e13a97047e073a292e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149470 Malicious code in wezen-spawn-oberon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5ee2abc458f3a13891087a3f60389332785b5b51eebc48a7cda288b973970d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147623 Malicious code in sagitta-supervisor-publish-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de9a0ddb3ac825b2c032dd952456a12fa1dd6793f53dcdfedbc6229196f808c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139564 Malicious code in arcturus-ariel-install-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a80cf0a64a22f38a82d52ff34e6e0d8162043c7109b0ced96ece487449a15f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149690 Malicious code in xenos-style-loader-transport-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8207d9edb05f31592dc56be9b98d0e2ac56c7bb7c766278adf76b39dcd12b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140933 Malicious code in commitizen-jekyll-antares-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc26d4847edeaaac6173481b164fe0df5a90f1bb3a3ba1dda00ef38a4eaa118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140661 Malicious code in chalk-xanthus-repository-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e114af5f4c3f34ce30645b799ef566a3aed7d0a103b438d1a2fc83cca45530d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149822 Malicious code in yildun-rehype-javascript-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7450993f2ee006c4a6d5bd8bc981fba7295d59c3471a8aabaecaeb1fe49589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146858 Malicious code in puppeteer-pino-ursa-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7515fdbe15c9c7166a923b5aac6268128105b471683c0d39f2fbe2f131160e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-leda-regulus-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8f0689326fa30f2f33ca0e7b640cd54c8dba70d9fa36308272b06574817d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-proxima-juno-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50866ac7a2fc8217495c8002e3ddf8b9a1da86ad209ed146a267149f7c54a5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-cosmos-sirius-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71aab97e6d0aba3a01915d59bf857fdf784e8ac784530bca1da797ba9123c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-chakra-ui-norma-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6583e3fb97f1c660d5acd6273f78cff0fa61a0737fe5b0b5233e8b582d2659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-prettier-stylelint-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f28d3b55edf0f2e8a35cc81f0cc5f431232659438bbd5565040e2cc2dfd17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-sadr-ophiuchus-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feda0291d6bed0d6bc08e9cc14832ec5fb222ee2ed5ea483dd4932982f6b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-quasar-quantum-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9677d228e7eea18d47b9886132ba5dbca5bca647362142479585ef14b666d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-sqlite-got-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538eb2a77f07a4d82c2dc92a67f5740e341cb37992ad8e0cac69335ae315904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141225 Malicious code in cressida-castor-await-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77705b3475b64f9c2feb49b57d114cb8a2433b79f6491f7a30c291524c61c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148079 Malicious code in solis-meteor-element-ui-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07d08f7bd181bf65426ca17d197be99b4431f0b0e6855e93f84eadb534b053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147447 Malicious code in rimraf-concurrently-release-it-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a3d550574f8a05abf6d282d8cf72319f5b6ce6dfd100ffbf7cb35777ee8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...