MAL-2025-139947 Malicious code in bellatrix-oberon-halley-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af62a0e9726a0d93c7beb487a2175fd6dd836c21b6b0fb9b04a2bc42bd7fe599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149797 Malicious code in yaml-nightmare-command-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22757024aa3a3d10664748a50311b9182e726fc4abcde0b54f43b750cb3c57c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148484 Malicious code in taurus-weywot-zenobia-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542d620ec307287a2edecb637cf7d0cc4db339f51baa18744193fc284ddb2748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146962 Malicious code in quasar-transport-spinner-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1d6a0636d5218446d56d763786f84428863756f135aa1a6dc761a0c94d774a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142362 Malicious code in exec-thuban-farout-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140917 Malicious code in command-ophiuchus-envconfig-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71777ff20b2261fa16a73576b34d21d19d404c983e8f479a1239d8d15976b869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143403 Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6530f326f3a9376699cc3340f33a0ee974cd41b8673b2e9ce2bf4aacce3bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147854 Malicious code in semantic-ui-perseus-firebase-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434d4e5d4dfaf9d49ee0ae359f833596501a2b8580d6d1017a79d5082382164a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive-amaranth-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8360dffed6c70e9c222c697a15ab756366193c77dff4a7f17660630761ee9db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious-white-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d143c2eca61ce2e0df04e00bcc7451f2ed06ad462a352ff7a319eb1195c22ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138766 Malicious code in handicapped-crimson-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6958348d2e05f511c65da6531babfbfdfc8f5799f38521d39d65710a18f3b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific-harlequin-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8c570f0355b8e840e96d244c36e23baa6e548a9df27cb96b73cc2756c8d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy-red-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136a6c89f41ffb43e3480e9e135af5adb06770bf847e4378bda22bebd5a66d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138944 Malicious code in profound-lime-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0d28d281a9dc4692e1bdb96d4103417a6ceb67e8993b2e375b2971cd44cfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139062 Malicious code in tart-moccasin-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863d5e0a7c3f3ed55de4f449b0b715916e1f5160bb989ea4d1065ef4bd24ea39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-pink-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0074ca7da84079367f873009592e2d0463a76bfc1601b654276cde150ac537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central-black-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bd430632870231228667d0ac88248fd249f6f82033daedb7a8f2f97f0ec02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-azure-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cd52b0166de72ca40e67be1e05b988770cd6030acc466099657a5a05dd5f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-ivory-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b20b49e46658b478ed10f5a5edf28e215b005acd632f9fa7ddd4915512aa5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...