MAL-2025-147309 Malicious code in request-repository-meissa-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebdae1a304ea837869b374cdf49ce53b0222699e2e9a16802224a64ee89f49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144957 Malicious code in middleware-janus-perseus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855c73910470153009c55832fa0f949acbc8e0ef531bbd95b957e53c22ecef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144336 Malicious code in less-loader-update-spica-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458ef2dc19a186f786aa9fbde9fb2071ebebce6bc29caa9bd74cf4543b1799d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142120 Malicious code in equinox-electron-mutation-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452f0da71958284458308f2766fb474ed2aa1c1d6740f3b92cbec0f8751cade0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142813 Malicious code in ganymede-nebula-playwright-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1f1c5a4a1c55419ec29857d1e30fa3543b82900639e451034c7637c80e6af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145426 Malicious code in nextjs-rest-elektra-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31685f1be57500276d60c7eefb51aac804f95d4aec096a79137159ca4ecd6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140771 Malicious code in chromedriver-fornax-stop-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be70b7b1e7d4b70f16763b44d920025a6e3d26eae494c87e150d068726f876af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147776 Malicious code in sedna-miranda-lyra-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4515a7c2f104b0e68f888aae3fadc0ff3cb0d87097bd8d5c7e8f3f2ca52d916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144894 Malicious code in metalsmith-xenos-spica-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0918ab27f9677fa071f80bd9e201bc29d7d84c5086b06e1819e9ef05c5c31882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139274 Malicious code in aldebaran-elektra-alphard-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7d22533d420b889973435226c3b0b684966479192d793f2fd1b62ba75ad695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146601 Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27adb475c01b655934995cdcafe5af454454fbd4beeed4ca694c1c812cbac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147415 Malicious code in reveal-md-lynx-semantic-ui-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cc96ccf55a565feffbd7fb93301166301782f54b5551af2cfa6d4b8846a7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141029 Malicious code in config-lint-staged-backend-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa2fd9f0627c17d5d0055e00b56430f9ba1fba381331f5a5942ea674862a810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145735 Malicious code in oauth-jsonp-figures-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a6fc5daa675afd58f702aaa8ddb9c7219d1acfc6d3c64845b81303a29c9247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144551 Malicious code in loopback-gemini-bellatrix-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f1a5292b6c699c7d3f5cade88c583cdde53884e1b7d9834d69df670fe907cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139483 Malicious code in apex-neptune-ariel-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcfc190d58bd417afc42caa0e36e5ed68b8d7697f1d871bc07c9fa9604cb7795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140807 Malicious code in cli-passport-iota-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1c96bbd01bc353cd4d6dd7efc63eb0ebf5878a52296eae35df15e5308f6326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141361 Malicious code in csv-ultra-wezen-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1858d3c966b6f580575064487e3a89444dbbd196a7324183c8b834a2b42ec59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144517 Malicious code in loglevel-postcss-pm2-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140076 Malicious code in bootes-despina-capella-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d6d6dd2fd50fbfb69d2a5c2e9d2d735e5bce93f882407139e9ebc1e18f011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...