MAL-2025-142490 Malicious code in firebase-cluster-readable-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820483210b11b74a9cceba2dad0c86cddf03ea9ea44d69ec62bd34b28d73313a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144565 Malicious code in loopback-socketio-restart-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc135c39dd60c0e9542761abc5a6c9b077de7f18dccf0e15264129c66ebd396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143495 Malicious code in hyperion-release-it-halley-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6398d96b583df5659abde30c24efdd2a4079e89db4c12b764d5adab1d17b39ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148385 Malicious code in superagent-nightwatch-got-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e9aec448506ac282ea13c172e7921e650b5cd3001c93cb67df38d502291a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149644 Malicious code in xenon-fork-levels-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89814b0b9aaa2fe6cd27e600a8b89c88ca97ce6c6130c4af46a9e19ebcde5ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139382 Malicious code in andromeda-procyon-transform-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bc3c18575bd42b0381ace2610a01c34f9535edc43456fad874807cb9d789bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139841 Malicious code in axios-thuban-eslint-plugin-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8a4f3e23670bbf493f18b8c5c2ef9d2b11ab2ab82c4a82ebb877c44b82bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149876 Malicious code in zenobia-sirius-babel-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a7bb68aad6e0cb18aaab45980b523b7643ea3438622b2a7f6774d879deed4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143844 Malicious code in janus-writable-warp-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d3aa24cc2de9f80b1ae9cdf8a0674f151e45be27c866b3a42d3edcfa0d9491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148462 Malicious code in taurus-castor-alphard-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae94e2a9377380ef9720cb8a9629ded2f7adf3290f1e4f280445c25def67d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140601 Malicious code in chai-postgres-spica-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86423b10b6f306d99f24e92167c625a39c2149992f37343635ede70b25d42e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140254 Malicious code in bunyan-quasar-centaurus-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e3f8afe9cd02566afc8188735a8f9203d9a9305958c4124e46a4816455542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141886 Malicious code in elara-perseus-xo-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06bc6e93d26daf13d4509743aa81aedf7d2cc77c9a7522f0242c46ebd25bbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142208 Malicious code in eslint-config-query-cosmiconfig-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d4f67a49c2f8660c00eb78d5b0cd0ee38842af3b08524b54732d34fb48df93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144114 Malicious code in karma-pegasus-config-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7dcaac8a0df43e485ca6c5ee3f16edf05faefa4c30aba7801a07fc475e2998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149524 Malicious code in winston-reveal-md-betelgeuse-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5353a675fc71a6f7979ed34bb601e42339f6f0c11956bee5628b60cfcb84881f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142728 Malicious code in fusion-cygnus-scripts-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da0f3ed82a6802e1032006ffa7496f3444868266e937a6df6c74d62d391362d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147981 Malicious code in sirius-transport-barnard-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f16b41c916fd05bc457611fe0cddd995304c32516ab4e4973479b1f96166143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146727 Malicious code in proxima-pipe-jabbah-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f975555787a6ad9d83c0e4048259f7211319a19264a2208be438317e99ba262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...