MAL-2025-140893 Malicious code in comet-tethys-phoebe-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc78fa48a337684e6465a66e09dc89ef50524700c030b2af9dcdf128f864afd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148863 Malicious code in typeorm-unuk-dotenv-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ede693b2a0091c7dc40e54e02994f3841f5d5018a0a26d1ce22f4216b025d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141346 Malicious code in csv-luna-loglevel-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39de5868daf7a7800d0aa668da6d9fb3265e2f881ca7e315c902452e2cea6df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuepress-rest-firebase-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-hexo-buffer-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060271c2db1d4a1038098a84e59d8e87c5b7e3fbbbc7aed1148d0a49196c04c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-transform-ultra-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b60d96dbe7f22ec72e5b3eff029c03cfadfbbdce6f395bc6655514b781d5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145849 Malicious code in ophiuchus-vuepress-colors-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2402ef9a3392a9464536d39559018c58910722a66f3e96b2ea86c9586448483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143895 Malicious code in javascript-websockets-neptune-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40c1fc54cb251468d40fb099bef3a0d38a64ef7923792843c8cd11d5e3554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143719 Malicious code in iota-docusaurus-mdx-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec391661dae987beab474a5c6896851afb310bcc2fb8753cf7ff547dbdc624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145026 Malicious code in miranda-config-odin-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a68ff1ed630d807e3bbbabbe5a34ff698f471826af4bab49a10070e6b40639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142919 Malicious code in gemini-websockets-pino-pretty-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6200ea4c861043caff0367692838a45658c6405477752eedfc75c3d36d1416b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143396 Malicious code in hugo-prompts-install-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143534 Malicious code in impulse-adonis-lyra-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ca4591578541b00ee189827d4e9f0a0dc42ffd41bb91438b48092b3d41e0af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146703 Malicious code in protractor-xenon-docusaurus-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18e6ac6c775039d3c19b111ee39a4af9bcc6553cab555cb4dc856a71bf73970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140284 Malicious code in cache-shelljs-europa-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f9bf5aeb82678510cbe2137300b8fb946e38374af64295bab38733b1bc607c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148780 Malicious code in transport-canopus-ganymede-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6d4ea70999468b91a3ad1807ef42db3a6d96c8f537496bc146c46c349a200b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145565 Malicious code in nodejs-frontend-sync-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ae7bd01528ae4eb0e9b0708506f1ef7e24e2a6f8bcb754efa14557a29756e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147747 Malicious code in scripts-semantic-release-galaxy-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc373eff89a8346915f7e86bdbe978bb844ddf27580d6e384ee21fd6bf5e29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-vuetify-less-loader-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413d8078725859d1005cfce9ffe26542402304c431c1b404966f75b708ed7d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143226 Malicious code in helios-arcturus-rocket-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6fb61adc850fdd19f68526676fd00186f6fb9efffd1d06c0d66ab15eaadae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...