MAL-2025-139195 Malicious code in achernar-draco-redis-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6bbb2ee0d463c7b05d8868a246ea77058a8af3bcc73db7f0edd475dd843324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145745 Malicious code in oberon-firebase-jupiter-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b771677147a576d042064574bcfeab962f3a687f90f3b3887e89b1b32d193d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148828 Malicious code in triton-sirius-redis-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a389ba92aa537b6a692d69e49d7613e04b83d6c6c30d29878b2d179117f167ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140038 Malicious code in blitz-cosmiconfig-google-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde950127da342b2375027506ab6050f96edbff872c390936286f2f3ee67fa03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144952 Malicious code in middleware-dotenv-pegasus-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba0f4941cf5b5883299433711cd0d4f41306c2ad7d878869705eb0d5db5d10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149702 Malicious code in xerxes-csrf-quasar-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ece8023c8e2dca4ee014eb30b3c00d6725308eb81dd21a64d4f80a9bf4c6b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149380 Malicious code in webdriverio-private-orbit-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c34effd25ed669028b7d3c9e64deb8764cf09db0a0d658a5a7103f33a904ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148958 Malicious code in uninstall-helios-geckodriver-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be46e5e736ed22f6a90e0fd254b6547b4d2107f80b556b56dc10936c3ef7b7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly-aqua-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e11b87589692e13378e5884ac74613c33bf2d49738f658f6a26fe123f4a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant-cyan-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85ee89f191c9a7dedcc977749bc2c118ee67eefa80d30c38aea5e284c2f35d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious-indigo-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebd9a764fbea22af91d1cbb9aeb458532b70ecb83864134fcc1b937c5b5558f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138901 Malicious code in nursing-amaranth-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503f9be6089338f89c0efa27e1dec4c55bbdbff9f241c775be7e311d99e84a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139099 Malicious code in victorious-gray-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8db8ed4892456becbc29f75ca434b652639869fa93ca9660a234ff93e9284f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-aquamarine-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c32f5718e443805eb02a3691956a419c256d64ca58ca06e0542eae0d60502e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard-emerald-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e44d60c14c51c84d88f48ff15851f928b0fbbc195366643a4d8c0be03783fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special-brown-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d616776fc9a4305920d96d83a80d66e81a7b76d5659ff64c2e3c85883108928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139055 Malicious code in supreme-coral-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86131409d2aa2ed279d0bc1cfea382880cce3ad9c98a681bae69f9c2f785638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138622 Malicious code in combative-crimson-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea20d6db67477fcb5b1856681f899c65c487c208feab659f676f57c06e0c1fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby-crimson-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5b6e4a78baf905a10782b5a03a2a856c6bdb3efed1732c275f56a02d6729a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138694 Malicious code in eventual-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c94ea4747f8fb2dd59ebc025790319974d67919d0575a61923400debc771201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...