MAL-2025-141097 Malicious code in cordelia-chalk-warp-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c68d77b2e4bd7da1bdfd033d264b648eddcfa07a88b91b57c2db7dfc573149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143841 Malicious code in janus-wezen-firebase-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce52a5e7deacd99a94aed248457563529af50decd47d736ec8e125d092e3b959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-acamar-cypress-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9574053cd71576ee0f80d65ab6fd694f6fcf07821d3526d0442742f118fc9909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148210 Malicious code in spinner-spectron-auriga-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9578d72dff0c43f30d887dbf39787ae56004d55f4d197d5557d68d9385666f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140794 Malicious code in cli-electron-builder-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565605b8fcdb03d5352356ad7f15ffc45159ec0491f1a7de8d9824bb1a36ac6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141472 Malicious code in dagda-hydra-centaurus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141852 Malicious code in eclipse-google-yildun-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebd3f347dd7bb4ad386fae1733a6954156c5ca860200b6c24d20e396d0a3917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142855 Malicious code in gatsby-yonder-polaris-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691b0ef996eb6991d3b134c40d40b4d6f52350fe5f6d04289c9efe2b264e58dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140365 Malicious code in canopus-nextjs-cz-conventional-changelog-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3bccbd45c710b8f6f1f3255a43b78cd7e70beb6efb60b17e950621c6b86d8b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-airbnb-cosmiconfig-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2ca7c054c5dc5dc4749da5d34633882bc0f11a8ea5e0349b8a44949a61697f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-sadr-registry-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49139fe083040a54e336806ef9971053450cdd358b3f344e5848b86fcccf433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-nestjs-got-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e835108c3ff59b6b19178f7c724ead49f3fc9b48f2b2727d02ab9a461285cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-semantic-release-nashira-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1789d099d0d6d3fe818d8cd16de7c18e8f8e48875e2d04a981153d07e84bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148512 Malicious code in terser-chakra-ui-grunt-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903a4d37382f2a09f61b6e8a5ac96de1298a22ff49679f7e040bcd366594f34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-ora-vortex-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408661f6f10e82b3a08fe5c7bd69d8b2fad5a5b6689b808f8b9c3a847c7f9573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145233 Malicious code in mutation-tailwindcss-websockets-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab3ce79ab60b14a507ea4301474169e43aae698fb034ca86bd2c14bb260fd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139945 Malicious code in bellatrix-nextjs-jupiter-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1de40fab1d77b3995ee4b7c22866b53c55a021ce44aab33a3bff0ed6b29d6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143210 Malicious code in heka-ophiuchus-cache-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a88089822f8c73b5b0395551f87a7a085394fb6497c4c9d5cc2a81edb29f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-quito-config-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f531c1a5b96fb5c266aacd15d4ae27a8090ff2b20ecc3b0874a6b3376e26d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-cressida-sequelize-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d60ba7cda25cda3a3bfc8e15b4f112403cc1c5df0679ff03785c3356c1e4229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...