MAL-2025-143200 Malicious code in heka-apex-firebase-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41f0381091ae082e9458edd8f1ec765ed4a9a451424985ffabe6a53d08441cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143168 Malicious code in halley-spectron-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73c947e71aa2563113e69cae4a5ed27b095147d625872993d40c732a020be3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148725 Malicious code in toml-version-docusaurus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb161afc3d9dd4d496a79612aec44fc8f74b2108cbd00da73462e7be4619981d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143895 Malicious code in javascript-websockets-neptune-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40c1fc54cb251468d40fb099bef3a0d38a64ef7923792843c8cd11d5e3554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146888 Malicious code in pyxis-quark-io-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541b8ef8907a8039f45e30e9d1f5dd19105a31f1c5741ffb0a9e4077fb2da0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140893 Malicious code in comet-tethys-phoebe-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc78fa48a337684e6465a66e09dc89ef50524700c030b2af9dcdf128f864afd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139716 Malicious code in auth-await-vortex-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8e71b70cfd7083ba4ab77611a35180bc9e213d9cbc366918b93d2ba4598fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149065 Malicious code in ursa-oberon-antares-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5bc84bc4c1d6cc887b8ad39364182e98b520f3696b8bca8c88a8fd6773b484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-epimetheus-rate-limiter-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad9c1494c426eb22260ef16a91168d268cb9fd31c3e614a913bf3df717b7dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-forever-vulcan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d964a2ac3b3ff01e0e1881b5a523f44e15739da835226a37dab4da08c7b4fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146061 Malicious code in pegasus-upgrade-gravity-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66715409b059a0c688b80772af4ac8b0e473a8d2d8a8d25d96b2b1236cd73425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139156 Malicious code in significant_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f8abc8d4aa9ffa2fa444ea71ccde61df434e0d48387cefb28ef5183d25712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138607 Malicious code in cheap-lavender-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3102ebe0d1b896ec2df366bad0530f730278d9f7483883ec08967534fa2debca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liberal-maroon-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404408d04ed10418987628cff8ad2db7384bf492d2deb3dbc9c014d9d6306348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139128 Malicious code in yettapetty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c05a523bf2411b4e88185593bd2653400a0d926d8b29a21365d28873e78088d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fantastic-crimson-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5207ab0330e3364dada16a792ef352dbc7c9b2b88ba16191ef543dca2311f107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-beige-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4badc0df98773cee9b3f296eb35c957010413dcba9bf6de5feb51ea0f86fb384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-indigo-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3276be6f7155bbda1c434bbb2706834047eb7f9ee634526192a9ab077e062be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well-coffee-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91de84200bbd114ea645aecc77a354960effd3153ba8d61e9a14b6cb58b5d9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...