MAL-2025-143251 Malicious code in helmet-eleventy-eclipse-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d31b4ffee6662a3c1074ec7d4f79a4fb5fc5a5e087c4aab4d53c6054de2a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149617 Malicious code in xanthus-achernar-xenon-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0307a9e41a3fb63fd942f96def2c8064a5c7e35505d8b5e4a2d76d15a67fcfdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141621 Malicious code in development-heka-fetch-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc34f1ad0167ae7f5840b129cbff77369019cb49cf1497dfc4cd4c540ecfb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149111 Malicious code in venus-express-lynx-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8cf852ce1290b0d658feac972c9ad5e20e74bc2a89903c85978cb1c5797c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-react-bootstrap-commitlint-config-angular-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2830a2fb96d2b57865f9092fb10f30f5a3f718fe0e9e982c4761680dc9e7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-altair-chromedriver-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d19135a93f63b1a066279e697b75d24109964e085449c635229caa7d16d56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147139 Malicious code in regulus-apex-package-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59a05a19349911216fdb272750a19dba669a24491c9ff6994f3988897384906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146754 Malicious code in public-auth-dotenv-parse-variables-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ce0a0ece80a0f062e1bda693c998505ee43a150523b272c46e37cbd25f5383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149534 Malicious code in winston-wasat-gacrux-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d29e8042d28958d31f889469462bdfb23b076aa1e204eb5b69c1a441fb2ddff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142145 Malicious code in eridanus-ganymede-hugo-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8dd49354124306d6cce53a0e2081438a175d153f93a53913c5eb90407d1ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149198 Malicious code in vuepress-query-private-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b06436ec479094556170f75890c6cff8e223b7802f7fb67abf0df9a8e976d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148284 Malicious code in start-ursa-nodejs-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593bc23c8976e4718436bc2e85ed27103ac307c4bd87d7308b8a3d041620871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142199 Malicious code in eslint-config-galaxy-postcss-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071d87b05998a03cb70ec6cb8b456a568c2d1826fa8723063940c54ca424a885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-xerxes-dotenv-safe-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144d57ad69e3cbf66d737ae2db5e7102a7489e5a07e294d84196fe3ebc72c974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-cypress-perseus-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba32422cc6145356c90d43a80fb2674a7e813479285c4b7355450904a54e6349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-jsonp-less-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ef6cedcae0b8171fc191b67ad90dfebd8ac6e394c7ce662b8e558b22e9d56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-vulcan-lacerta-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee152af5e0dcc5068bfc21b3ba72197064d1a82c2e97851c04f94b589799f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144226 Malicious code in kronos-sirius-process-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edc19892781e5698a861cfdaaf9cb484c281578a45fd8758876ddff8f2f484d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-apollo-alphard-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150d51d65c1cd9493101771d11e68509daff5b35998f15e358c5b04c72e6604d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140362 Malicious code in canopus-kronos-arcturus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e4d96be919d586b8b15710cbae4a8827d448f68bc93f2af7fdbd94ccc46b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...