MAL-2025-139628 Malicious code in async-json-metalsmith-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3de2ede2b17ab92f94ebfb9bc3a04946b83f63dcaaa1578e8dfc673d1438ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140571 Malicious code in ceres-lynx-upgrade-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82af15cc688492a87f753018c2a22b0de6ab6047cda2e5cd8a4d9ea67d74dfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144875 Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145758 Malicious code in oberon-xanthus-slides-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564241ace50ae8cfeaf5ab8b4c943999f20cb66edf29bb7a2025370de13b0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-hermes-mocha-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa3503433e49e30054cd2630595517ac5f56481aa4d95e98c70613239f8bdc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-restart-ophiuchus-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02107644150263cb3d55bedb6b19c1c298c98e216e840814b6a277bdf849f060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148686 Malicious code in titan-nashira-achernar-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4483f30bf3af73574f51a767375f451474ab54c0ac90c82e2e69c9fcd2d14b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149052 Malicious code in ursa-corvus-aether-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78819ffa548622865ca6465342d6402a8002cd352fa308a1e580dbc5f296c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140552 Malicious code in centaurus-rimraf-install-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a20fc42722644aab92bd2ddc6bca3420470cac4cf0326c16962a9a81849fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145726 Malicious code in oauth-dorado-gacrux-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717df737b264bcfe501c344b361782b8805db7032ba93e9e1a2a7bab4dafada3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-lyra-fusion-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a721ad8bf9d0f97cb49ca80516f83abcfa1f369087036d75d569062d51ff5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-fornax-stop-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be70b7b1e7d4b70f16763b44d920025a6e3d26eae494c87e150d068726f876af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-hydra-rate-limiter-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5576b89ee3feaec1d6baf641339435fecb1de9058dec51057e00bfb108b9f7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147411 Malicious code in reveal-md-grus-middleware-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5aeec93a734c0dde2c4d4e430a88ca8320a46fe77ff5af7125db03ad02c7d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-sass-loader-axios-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da37f8b8f1bdc913763359c08e8b7a35cf41c0a115cc87a8035c1244809420db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144073 Malicious code in jwt-foundation-kronos-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02bbc3d31e8bcc41e33fd6c91d9aaece87fd4ad899100435d7e8ac475172ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-quito-norma-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee947f96603b2eccd772524f01f17bc2300762074cbc270bc6b8bfb89dd1cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146151 Malicious code in phoebe-fusion-soap-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22f0820b09c7cdfefb0d7d118c8e8b2ecae5f922d629da09c23570bbd6543da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148367 Malicious code in subscription-test-protractor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1172938e85e672a705c123845243e3c77d61349e623171947cf7b653919b6587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-standard-dependencies-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537bdc379a0f7717af8724e67fccaa8f2f0474efabaed2f5e7b3827952eb29da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...