MAL-2025-147909 Malicious code in shelljs-bootes-regulus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea1d60a341ee060fd308c857d380e387103b67657fcb6ba02d846cc3f73d1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147460 Malicious code in rimraf-update-hyperion-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856bb93d73cea29e9602b81c30057a610e50532b6049d7a87ef6b010f8a1aae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143199 Malicious code in hapi-winston-halley-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144912 Malicious code in meteor-google-jekyll-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1566a64039428cf1418221a4fac71c67096ccd2cc5667551d058f7fe3f6978c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142851 Malicious code in gatsby-registry-quantum-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9a624219976b6e13e865c96a93d11d8d08d21673dba0b54237afda23db2590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143209 Malicious code in heka-nebula-rollup-plugin-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27d54fb6425d7716f20259ac15707ab8354e139d9a713e31dd0d222e2275140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142845 Malicious code in gatsby-miranda-iota-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb652e8edd6e45f3edc03a5a3cdc6e3175c55ad095fa5a223aaf9e27be71c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145631 Malicious code in non-blocking-writable-soap-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d6bfa5c0d577f0ebf3c7294acf34cfeac91f1b22fb6b71b5864ec0edf86df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147207 Malicious code in relay-odin-weywot-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b4df48953dc2f23983a8d7104c685d514b8f20ac0b05869dc00d155d023555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140436 Malicious code in carpo-cors-react-bootstrap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d871110fa02601bd5617e3520de63bfc553c86eda11a0f3a7140b61843da2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149362 Malicious code in webdriver-mocha-sadr-halley-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c3e5c96970e1b1a65266f61d587831200fef11a12d69b9185d22d8ac142598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147251 Malicious code in remark-markdownlint-capella-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9166b3835951835342cf08b9670e0fdccfae51b57ad4dfa313de94f2739e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141982 Malicious code in element-ui-rocket-vuetify-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d561aaa05ed4922293b5ddb3e2defe3f7e4d1b2e9bf8d593380104bd3a72fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145654 Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147021 Malicious code in radiant-proxima-kastra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c059ad999a8d2ee6212251a9089d2fc0458dc46516a4c87a9e833bbdf6bf5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145860 Malicious code in optimize-css-assets-webpack-plugin-config-bunyan-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271f5b41993cdab8696ed3c8a08371cdbc6ca90fca62b3ebd1fe492a130b7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145399 Malicious code in nestjs-magellan-prettier-plugin-markdown-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051241d3c5a6136195caa4925f68936f91d0643760a4e9e13cc48e4b44575394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141272 Malicious code in cross-env-semantic-ui-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d430064a3f2838ee485b692085966c87a656a847987e105921afff07be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145414 Malicious code in nextjs-dynamo-gemini-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6762dff6c35a79769f64aff5cba24b6d655d7829549908382bff12256f004d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149815 Malicious code in yildun-ganymede-puppeteer-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bfc9273c73ca300d2c28e83d74bcd02b2f30785e86e9bda858c5577c482307c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...