MAL-2025-144324 Malicious code in less-loader-lint-staged-csv-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5d55c951ada331fef063866e007b0f287b55a26834b8345a1f0b2a9b4447d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145224 Malicious code in mutation-ganymede-proxima-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3528842534dd10aa2d17333987b5c806f6eb520cfd49588cb9f587b849f61014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142940 Malicious code in global-lacerta-sagitta-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aab090a06890abad34f96c9d0c014ede763e63fe2ccc634f3da5a8b7fa2a1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144573 Malicious code in luna-nightwatch-pegasus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab6ea5a396a6500f417c6d9ecb7bb5989b853bcddffe2bdc20f3e8bd6592c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142821 Malicious code in ganymede-sagitta-mui-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb085ce71feb6c66240d4895529a244af49df4f259aa4e0385417f3e708524a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140009 Malicious code in betelgeuse-test-wasat-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2627a3d5478cec46a418310793381c869e3537e1fe33a28306aef8abc0b44db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146161 Malicious code in phoebe-metalsmith-antares-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fca16066e644ed44cdfacbc49e496fdaf106242a6c75d6fa7eb39de9968b719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142305 Malicious code in event-axios-elektra-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f727e46d13d502f5467c3574631b18795f11aaa68bdbfd4d14b263c00f2b246f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139965 Malicious code in betelgeuse-andromeda-supervisor-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe094e00627a2f06acaeae706de8a734ba3bd11e9d5d984ed80007cf1c261d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142310 Malicious code in event-duplex-node-config-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91782b6d72afe4d207bd69bcfab8387ad5e5b1f67818488fa1c67774655d9e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142316 Malicious code in event-mensa-rest-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a65f4dda3fd0300c35264d927cbb117a47362558fdbb5fb44120cf40b246cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146877 Malicious code in pyxis-halley-hugo-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e73ab5d5ad505774fa0888b694599b0d611ee8e2dc23dd1b9ad596d3310810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144150 Malicious code in kaus-materialize-event-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be0d8cef8cb791f6a09503be56fe69966c6977962c7e63fbb1283afe25dc0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-request-antares-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5735598cc672f8656c24783449a33a750bb3c27163408675778eaa624319e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-algol-express-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a0058178b59b515a67b56d6ac529d010098fd03ede8aab04ae2f929cedc8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-solis-rehype-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6c2e86ed9bc0b6fa4dd7b9bbd2972e683c9e48b1caddf8cf4c85d9304f02d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-pino-pretty-style-loader-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08188ff739e64b3bc2b1b4ed3d1a2af7e8f4b787ca8103e54a4bc1bf22a61c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-yaml-morgan-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f25206e1cd05dc85dd05c82e73701f1ebe05803670e00cc1cfb99149f6ee5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-ganymede-hermes-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e3398eec782d88542539c931720b191039bca6ee9204f7b0908fff31927037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-octans-bellatrix-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fcbafc3bebf2ed9ba8a5cded8eb911df8c059d996f37c770dd5ab22e1e4ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...