MAL-2025-139254 Malicious code in airbnb-gacrux-concurrently-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f902fe71cb86fc56849ea755fcc2c4cb1b0f2d2b8b5e2ba0e79f9a3113e4a17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144816 Malicious code in meissa-mocha-jsonp-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83edc36d37b3d9e117d48042f951af1920347abc4aedbb3249617799e47e8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143381 Malicious code in hugo-chalk-rigel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fbcc8a6d77546d8df2d30d0a77c57dca8e17f043376af5bbc204b5e38bbc3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140063 Malicious code in blitz-tailwindcss-json-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6717ec68ba9ab458bd15bd7723e2855842fe4ad35f81756da54693198f24091f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143102 Malicious code in grus-remark-transport-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecfc122293a711c92555d3df5d8c331ec53e89698a878acb8d3bbfcaaade8af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149699 Malicious code in xerxes-bellatrix-cache-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c869b6d65d8a083db77248e46db28ad5686df5551258ce11ad5e4bb31b8589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142971 Malicious code in google-testcafe-proxima-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3e15135c2453afca7d20db14141c951fd9a74b005c6f62e5c5436455ed7d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140822 Malicious code in cluster-css-loader-halley-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3390f5930409dbfea7ffedd9530a9a061ccceccce84acc295cc9a2a934d2c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149233 Malicious code in vulcan-express-phenomic-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d9c5814154ab32cb6266dfcc631d0eecf3797aee3527044383bd1999e4c9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-pegasus-xml-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c99cfe63d56d39e7c66715a4797bb30032ba8dd6254bdf514d52cf979e3706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142942 Malicious code in global-loglevel-lacerta-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a30326ba54024be4ad2981dd085309ca4d5aec2dd66869c85e5abf7ee2433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144321 Malicious code in less-loader-hercules-phoenix-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2202e59bc8b6eb663179fec4b52bcb54fe06b2a33c3a4cf3344a08f559886c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-elara-acamar-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6804cf47f84017b242dc1a51998db153f8d0c82cc7961ff287100cd8eaf45c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140745 Malicious code in child-process-fornax-ophiuchus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e14ba578f9389f96c9befb8dff2098b3c6d0e1be62aca0d7dfb57d570ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141552 Malicious code in deneb-oauth-changelog-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5c02fed0ca0d742c365b1cfaadbba82eea79ac78e874e946f8a81179862300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140492 Malicious code in castor-procyon-nova-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4634f3def88aa52f773325b3b73a38d6f4d42314962303a0e9dc8a99ed25ce34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140040 Malicious code in blitz-cressida-cross-env-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fcf4059103d0880d4dca99c12faf326ce7e1e5349fbf0f08197f899f91d63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145553 Malicious code in node-sass-run-script-chariklo-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5944bf5c3be07d2e392061379523f658d10a122853c5d85cfc015a5a2ee4bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139224 Malicious code in aether-avior-enceladus-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce1c47ba5445dda49daeca42e550f04bec27ff0a7d15fef9aba199e2ed0641f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144561 Malicious code in loopback-readable-meissa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2117bd95d718c11d1d7d6fc5d2cb578836a47b121782b374e510f1375c7c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...