MAL-2025-141058 Malicious code in configstore-markdown-convict-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27545746f4c3e9130cde3a5dbb4003c04061195eb37b9546b96683d306d649c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142163 Malicious code in eris-blaze-pegasus-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649ba8e5f1092cb16388028b23ead6b8f6e1199fda7ac9c199d2088db3c03feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139308 Malicious code in algol-sagitta-nodejs-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dc9bd45ef009b6ab43395bebf52be6466adfbaa8040ea661dbe076e5603fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147187 Malicious code in rehype-spinner-wasat-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c2c259413755d91ab2d7887a4bad3620fb777e89d8391c8ead79364d62b8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143991 Malicious code in jsonp-centaurus-lyra-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36281ac0295c72c85b8d98b8680f953439a838d902bb40f7cf5ccb05193f6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141938 Malicious code in elektra-blitz-development-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db17c3573c2afc48e71e8d7d0defeea06ca90a04b2e4462187b50a5d95159e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140005 Malicious code in betelgeuse-semantic-release-jekyll-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87256c644c630f974d1a273be5c953ef8236d129ffad8560fa6d5a92e3f92719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147748 Malicious code in scripts-sequelize-init-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97c59d35e035c1d1dae8c136d0747c24a153a8107271fafe2a54c93169f2310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141992 Malicious code in eleventy-callisto-forever-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447abbef07e2169825384d0a4f6cd21674555dac84ac23aee274c4866a00fc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147612 Malicious code in sagitta-publish-npm-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c7fc955c277c3de9a6cc9a4bbef4982f2f62079dcec8f17b305ed1db8ba22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-stop-sagitta-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb65db83237cfff58b0e4af1e88a81f87370bff46c3902bb7ae2cd9deb6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-prettier-stylelint-draco-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea45ccf54817bfe9ee066a4fe4e3c2af6be163030e91e326a052c31613b861d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-nuxtjs-umbra-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6747916a43b67afac536aee936f618012365ded1a68c4b06f03465d4eca2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-phoebe-electron-builder-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36eeabd19bdeac8a1ef874d116c625c345e5f293b115ed04241d7f4b9e3d9df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-docusaurus-carpo-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e17822857865f3476661e6af731756d9683c17d07a7873ad69a30b5c919b6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-lint-magellan-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd7ba78ae6ff950c86e95dd3e3febac32c90c13ee98faa58fd9ae9d974af8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-ophiuchus-karma-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49e03ca3f0551cdfc4df212ad67733536d96af6b3b3ed4f34855c841d85f0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-mocha-request-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df02491b09b3446d54df684676d132a42d9464b0f5c8f0330438655a1c2bccac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139708 Malicious code in aurora-publish-markdown-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6c37dc5bc5d8fcb554dbf6f064affdc92e9b34a5aeca6ceebbeee20d52be0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...