MAL-2025-143453 Malicious code in hydra-rigel-eris-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adef32e2364f5be0643d6106947034e89ec1ba298813e0586f30b5f14545fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139396 Malicious code in antares-chakra-ui-dorado-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c9ac75f7658f7dccead98d47dab230ff1d8ce65cfcbb496cde1d3bd4272e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142988 Malicious code in got-superagent-passport-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0230d14e2b4ea76e2119fa0b86c46d053d908cf42b18a75e56f3b15296d96fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139717 Malicious code in auth-convict-passport-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0409e25c28055436d0a52f57af930f00c8e38df494d976a912629981f45ddcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142989 Malicious code in got-superagent-winston-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0af67224d6ced20e78cf16853a62e8f18f7cb7583df01f4ed51adcce2de1bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148831 Malicious code in triton-webdriver-mocha-hercules-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c377541408e4dd2d0d9420417ccf43e9296fce7cdfd3020e459e556e4478417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147946 Malicious code in sirius-development-gemini-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e955a5191c86c0569fc6fc59e5066668be1770cfc264f30ce9c384c7aa39560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141549 Malicious code in deneb-metalsmith-tethys-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2939cf6902ba5bd84f266f2225f8aa18ebe1d645040c874de885d8642b4252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149211 Malicious code in vuetify-ini-framework-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ea7eeee9dc7efb74efdee65854ad1c7cafd35be5c51a28e7a4f8938efa4b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140295 Malicious code in callback-avior-apollo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bac3e861534cf5cd11bb2bc5fc8ff37a0ada127a12c7e2e75079a7b7e03fade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147564 Malicious code in sadr-jest-tool-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925b1ba67d5b197bf2456562535ef44ea74362f49ab6741457c03efadb057eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142737 Malicious code in fusion-jsonp-solis-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ab6db8e999cb39a39729af5903c86fcd6c5d1a9f6f9619a848337bffc56226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145695 Malicious code in nuxtjs-astro-dotenv-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361f069c8f34b46d870c8a13f9857e804499b8f943a16c7ba015da58b6adddfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140522 Malicious code in celeste-rocket-nightwatch-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8c1a7ce21f97d1a465c17c98b1da1fb0548bcc5ac605c81f2286030ac4390e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140098 Malicious code in bootstrap-blaze-betelgeuse-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fee5f7c3e2acfbe7402c84173336a1d9eb3ff7a298a28a3038a72366844dd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147899 Malicious code in server-framework-andromeda-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bf77a21aa60073ee5c5f6339fcbd7faac1ac57a81404777827d4cd1dd5a0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142574 Malicious code in forever-release-it-iota-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ef678b480ea8357c3403bc92974a35f3d3162eb978c30eada96539552e2922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140150 Malicious code in buffer-achernar-winston-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a565a391c2111e7bfc57ebe2f777db3411010b05f0da531578022935b325ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140817 Malicious code in cli-xerxes-less-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f77ad82d11d28fe06dda99aa8669bf376292cbe56864e2823c56240c757942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-gemini-acamar-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0277a04b53abf1394a107472a82edec4a8da37c1784fdd09e4fd7fa5017e6a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...