MAL-2025-148860 Malicious code in typeorm-typeorm-development-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f3f51d085b23b028fb1c66c2191341c860e04f3b386fc93fc4f4c4db87ed1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140879 Malicious code in comet-lacerta-config-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889402c35bba670d63a6ad381b3eddb7635381d2d40ca3e04ff69bdc22e701a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144854 Malicious code in mensa-halley-bootstrap-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1a18f9f0dce5f00570338378868ef126968870597e34b985e1d8bcc4b1bab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141798 Malicious code in draco-wasat-miranda-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7854af127c6cde6e23a5aa64329b6e001b5ca79115617c855e6e263daf890134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142052 Malicious code in enif-less-procyon-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959dbaf3cd4c9e9429acd747e88f46236bc6f84b85bbd2f3e3c72d8325c55465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140671 Malicious code in changelog-ignite-query-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6caeef7d23f9bf8806e1c40ef6efc54878973d26ebf8ee9c404dfc4b728787c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146108 Malicious code in perseus-procyon-hugo-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cbc891ef57a039f013ea6cf1f8543491dfaf10476bd98ffc8f915a00739772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145692 Malicious code in npm-taurus-canopus-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d949045a10ffe384f75bc810051fefaa0c8329ba416cf7347aba64b4906bc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared-beige-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a7795dec554714ee6d12138c4b61dc1eedb909e572d48fa3de60066f609362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-purple-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88da381262350f4dcce284e6843b6eaddf3a9a5e651dcb0e597d9b86213bb3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-pink-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0074ca7da84079367f873009592e2d0463a76bfc1601b654276cde150ac537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-turquoise-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b937be270c79253db89f470f116f0c0e4e74708349b3993b81719979afc47da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-bronze-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef9e82aae009594b04b907205f72f7f67bdd69d69937a6724d0c0b84ce246ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139007 Malicious code in silly-ivory-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9f2f9084c87b42668326fd4ab3ff0f5546bea3bf332375c670ee4a9e993c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138629 Malicious code in confident-ivory-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b20b49e46658b478ed10f5a5edf28e215b005acd632f9fa7ddd4915512aa5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138662 Malicious code in diverse-harlequin-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ee28df6210a54b22e0979313c1d2f14b129bbd0701896678ec226afc180bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139062 Malicious code in tart-moccasin-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863d5e0a7c3f3ed55de4f449b0b715916e1f5160bb989ea4d1065ef4bd24ea39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted-maroon-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25b1d74b0fe2abbb639904a901d5664905bbf7a4f235ae76bf26e9e90272641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-azure-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cd52b0166de72ca40e67be1e05b988770cd6030acc466099657a5a05dd5f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...