MAL-2025-144589 Malicious code in lynx-avior-pino-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f9c69a3951682f252b2f8ae68ca5c4f9337a9bb35618a5c460e209509b2bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149502 Malicious code in winston-jupiter-node-config-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4eee41e3597118a0d7e5e4045973e1ab46a0ea07c8f35e8a7f01da69e57b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-ini-carpo-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710073126339c59eb7484057356e51e3da9dc45a7611ec43e102dada5d735dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143614 Malicious code in init-arcturus-native-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3da5ab242a8037c19793e514c5febcb50bd0be61014c037b5af9be423c980fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146608 Malicious code in procyon-nodejs-link-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6885027c9d224f1ad6b3459b777b2bc5cea2880932235a3b714080e6f01573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149211 Malicious code in vuetify-ini-framework-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ea7eeee9dc7efb74efdee65854ad1c7cafd35be5c51a28e7a4f8938efa4b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-polaris-markdownlint-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ada06cf4bada5df5defef68478de548bcf7148fe39f7c3cb5dfa4e16d3ecbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141147 Malicious code in corvus-chariklo-jekyll-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f799fa6dba8ac85d2c88def2e925b5de88aa0a8c48f0919d22205c271bbd700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147966 Malicious code in sirius-pavo-xenos-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff38a4715dcb29d3f768ba1b92ea4fd7165a4fea4b3280e36bd8f66d64326d6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146266 Malicious code in pipe-prettier-stylelint-fomalhaut-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ac29fca3ac3709645dfc3f811b8445f16d912d8a52b86c2ff781007970a518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141604 Malicious code in despina-pegasus-mini-css-extract-plugin-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cd25cf15f924783c9c0dd4ff35111ce8a5bb6b596dd67ab342567c9a9f3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141994 Malicious code in eleventy-development-tailwindcss-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f3a4852ec3e422ee14e16b58cd54e7e98cb6c610737ca1b7ac6d743b0b332e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142408 Malicious code in farout-despina-scorpius-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad7b76331424a8a1a1b458b74349bbe8a9fb440db79c54dd93f88c05be30d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141547 Malicious code in deneb-magellan-triton-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 757bc1688c339f1ec8ba8edc984059299631fa611e743caa9abda899688a70c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149338 Malicious code in webdriver-manager-xerxes-event-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db070374083eddb2daddb8c997cff503dade123452489a5471fccd7524dc5dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145988 Malicious code in passport-websockets-apollo-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181d5bf8f8e773b12665333b95e60d88264ca346871341c8131c2f24facc5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143862 Malicious code in jasmine-procyon-capella-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d840f6107f0d615fde8a666d226e15946ccc996ec6ce8c0f8edda4a7b3ebe8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140446 Malicious code in carpo-jest-celeste-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5302a6da915ba69b2ef4fa60cdd9d629cec52485a615e36d82215554a1e685f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-jekyll-async-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae80eb5fe94ed880a1e30a8f4eca1187c053f73941d55412553cf556160de14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...