MAL-2025-143413 Malicious code in husky-cli-axios-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e3ac914740a1f8e6ac85c3136819adc22fbba0178c57d910ad1afc930d0768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139272 Malicious code in aldebaran-cressida-morgan-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff470efd34f66915cb29fb44804c26b3905d8a9b494cebe1dcd75a1a0d180f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148655 Malicious code in thuban-link-bootstrap-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733981bb19ff12b4cfcabe59bf6a8a94808fb30163e1dc15d296f1c523f55cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140487 Malicious code in castor-leda-init-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1e61eb88822973087b0503c6c945e9cff5c7871fd776b41eeb9b423b647460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140962 Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142031 Malicious code in enceladus-nebula-fornax-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c11c5e234551c51c428218f768448a985e46be8ea1ada6b02335b438eb02b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140695 Malicious code in chariklo-dorado-ganymede-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84db3f327225b1c944bb3fadcbb5ecafcfe89a049123bfc6afb6d2351171f212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142723 Malicious code in fusion-barnard-vortex-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc006a1619b4883238ee51f3a4e4ac2d1b8e1e5c6068d0f991ce840da14dafb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141260 Malicious code in cross-env-nightmare-public-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89aba308c0195b2c6c00b9e83e8ad088d62e10fe41045b98ace2fcaac2f491d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140920 Malicious code in command-pino-magellan-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19c7a1bc2de7c6a8e0976668d490feb1b74fd83c7907d6b697d96061ed4ca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149831 Malicious code in yonder-apollo-ophiuchus-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ff70c563ede2b3fc94cde3fa8f010d80a9e52337867ac9a8c2b2a2e78ce96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147396 Malicious code in restart-style-loader-farout-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4acb30839fa2bf4533553ea8036a3328332f701c3536ff9d79c3f553ab5826e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148694 Malicious code in titan-tailwindcss-koa-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc07afb489f3fefb44ee960e27915b773a85eca1cca9ffa50c5c027d2283e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143489 Malicious code in hyperion-morgan-start-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8a1f833731723eab33bb2157f6dd3737d4498b61a94a6d4279c80dd713bf0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148272 Malicious code in start-izar-meteor-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bbaa8857adffc1887054498110d02d4405e7640cce3cc16b238ec53cc5f0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141651 Malicious code in dione-subscription-winston-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee660994a62fdbc5057c92951e6a2739b653f0b4ae38c2fef9fdced410d1b7b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146630 Malicious code in procyon-zephyr-gacrux-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b36dd182333e223a07c14e080a25615a128d34c5de792bd9756e21634425f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142410 Malicious code in farout-draco-supervisor-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4858586155e7e63f2df1e9db1181fe0476633fc8b100b90271961b692e2d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140956 Malicious code in commitlint-config-angular-apollo-sequelize-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c3f23943a372761b3922807be26f6d0d6aa6f29d881e122916b5201148a69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140924 Malicious code in commitizen-await-commitlint-config-angular-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ca5ab4510a606274ae8a004323b0e1abe851ab2bd6248263f9b5647d2de6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...