MAL-2025-140701 Malicious code in chariklo-jest-titan-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f4fa5e2efa6b267cf81c7911f6cc457036256039097ea7f0efc376e5585f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143226 Malicious code in helios-arcturus-rocket-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6fb61adc850fdd19f68526676fd00186f6fb9efffd1d06c0d66ab15eaadae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141893 Malicious code in electron-axios-pyxis-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf1171fdc7bfee894dac8408c7f6222af12050c3f1dda9013cebf17f229d5ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142257 Malicious code in europa-atlas-despina-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a7d6efd6baeb724020db9807fe266b2a6de8f0b3a65477fcf5f4ec343b8eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148863 Malicious code in typeorm-unuk-dotenv-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ede693b2a0091c7dc40e54e02994f3841f5d5018a0a26d1ce22f4216b025d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146888 Malicious code in pyxis-quark-io-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541b8ef8907a8039f45e30e9d1f5dd19105a31f1c5741ffb0a9e4077fb2da0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146703 Malicious code in protractor-xenon-docusaurus-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18e6ac6c775039d3c19b111ee39a4af9bcc6553cab555cb4dc856a71bf73970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147004 Malicious code in quito-sequelize-spectron-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8100bdb0fdc2635175097524e7857e5184b12442b72b07a0a691b26ff19208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143719 Malicious code in iota-docusaurus-mdx-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec391661dae987beab474a5c6896851afb310bcc2fb8753cf7ff547dbdc624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143943 Malicious code in jovian-csrf-javascript-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b158ecf3d5415472585bcd086696d2ca6e9cb147c39377fb297a2e20d6a871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142614 Malicious code in fornax-corvus-socketio-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b118c859ce159a51547289bf829d5e6adb46f1e598638f8044f7c778c3486b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-cassini-mutation-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401128304cdbf7c072836cf82f8fee13b009ff8a7e027f96937fde57663b0d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-winston-taurus-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cda3d47eb443e153b268e3cd84bec534376aa447abc556d9b1fc2afb49c208e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139880 Malicious code in backend-chariklo-bellatrix-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05642153386f10d853afc481e3d9d8d97b5e9092a1a7bfe22891c2f88817238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145632 Malicious code in non-blocking-xml-procyon-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0a264027b7585c64463a147d401953cef73809abb5f32ecf3d768ab2c538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146781 Malicious code in publish-css-minimizer-webpack-plugin-nuxtjs-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61de6bef5b68ba25979e912b33bb3e86106a2d722106557cfc8f1fba1d53246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141325 Malicious code in css-minimizer-webpack-plugin-eleventy-writable-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c809fff64854b81d5e2dd566778b8b3f0b3593ce2d0a3267e2f2772472b028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-standard-run-script-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c922258173b565aad147f7ab8c8f6e2bd3797075453bb4b7d65c9e6481e66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-antares-configstore-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bf3571b0999a8ef8c8705b0f31f623f8213498f18aaff113a2f2fbb2675667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...