MAL-2025-140522 Malicious code in celeste-rocket-nightwatch-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8c1a7ce21f97d1a465c17c98b1da1fb0548bcc5ac605c81f2286030ac4390e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140295 Malicious code in callback-avior-apollo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bac3e861534cf5cd11bb2bc5fc8ff37a0ada127a12c7e2e75079a7b7e03fade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147946 Malicious code in sirius-development-gemini-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e955a5191c86c0569fc6fc59e5066668be1770cfc264f30ce9c384c7aa39560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139396 Malicious code in antares-chakra-ui-dorado-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c9ac75f7658f7dccead98d47dab230ff1d8ce65cfcbb496cde1d3bd4272e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142830 Malicious code in gatsby-antares-metalsmith-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0608261a0fe9f89fd63b28a2f5ae4ea7d0bda75b02105c40feee677bf54f4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139717 Malicious code in auth-convict-passport-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0409e25c28055436d0a52f57af930f00c8e38df494d976a912629981f45ddcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149233 Malicious code in vulcan-express-phenomic-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d9c5814154ab32cb6266dfcc631d0eecf3797aee3527044383bd1999e4c9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144000 Malicious code in jsonp-lint-meissa-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cc0a698c1725ec64130dc90c940bffe2905c6de5e4f97b0c17e638e24af4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148615 Malicious code in tethys-cypress-spectron-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988f5b93fcef7a82e01b3fd236a72124b874972ae27458fcb2eabd14f7bb9eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145758 Malicious code in oberon-xanthus-slides-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564241ace50ae8cfeaf5ab8b4c943999f20cb66edf29bb7a2025370de13b0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143441 Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145332 Malicious code in nconf-ultra-phoenix-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23544b478756bcc91654d2d0acd95386311f1aee22d1468ec6edb87ab4e4412b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145451 Malicious code in nightmare-ursa-non-blocking-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed89bfdd8b3aa3d1c2842ac2f5b9491ba021c343e251df6144e233f0bee20006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140433 Malicious code in carpo-blitz-nightmare-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1d5936815c3f7fc7fa7cf85c4097e6689d8d83126c8007b5f525d2c2e31530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148766 Malicious code in transform-jwt-vulcan-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c80384b9ca3ac80bebc0293067f2180a4cc09a4a9a27fdbc9006815ddc60ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139927 Malicious code in bellatrix-bulma-postcss-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae5404a833811b66ae189517e867b655010ebf4f69b88a43eab14576f3f8879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147169 Malicious code in rehype-galaxy-hydra-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae515cabdd377dc8f6e72c0e9f506b2e5ea246dca2b7ee74d12443ed287d875f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141175 Malicious code in cosmiconfig-cassini-commitlint-config-angular-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38aba14487f3c4660822de21e0a59285fc43511922d5069d9f422ed261c671ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140853 Malicious code in colors-izar-deimos-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade47e5512f5d5ea7ae6f5275ef4dd11f9b97b478c61a8fe6376509bf39e0e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142380 Malicious code in express-janus-auth-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af4e08ee61507d2dfea640b983f7ea3e33015cfc6e4b78590648dd42816e764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...