MAL-2025-144375 Malicious code in library-fornax-start-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6a2c4abb42f5f3186fb4734f53bb98dec2cb33af1fd697699823bbf6cfe4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149171 Malicious code in virgo-sirius-prompts-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02f8874cbbd0c3c9876281a2bbaa55a1e31356f32b7948983d1e797d2fbc0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142842 Malicious code in gatsby-exec-foundation-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aaa4659fe961e104e5a69e278baf5b0518eb53c8882b3de7b2bee0c88b2e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147230 Malicious code in release-it-phoenix-node-sass-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252b6058a3bc8d31180d451e6fdd6db27a4b8de5be62ce3bf854ce7cb5599181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145086 Malicious code in mocha-levels-buffer-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890c0cae9df9cd10d926ab284ed252cf1cc4bdfdceba6c2355a481aae5936c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143735 Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-levels-commitlint-config-angular-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac128b29c04901328bcb6420c6ca7c26bc5e847daa6dc52991d4dc227b7dbe23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-pegasus-ceres-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38cce7f7f73b27d1ed49505cebba1b4895214e8d3f89254d23015ae6620fd55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-enceladus-commitlint-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5b92625cee23fb6202ced8f506a7afb92981746127a2cbdd7cb2004310ad60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-bellatrix-async-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ef429d9f796ffdace8a3f703b2ae5197b3a9ee8fafd196f82b1f31c7c80adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-webdriver-mocha-dotenv-safe-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4741cab512695c1c5578f08e6536747101c2e0fff2151fbfe86c9ec962f7f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-sedna-centauri-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bf5c1589ac18e2c3471d0274bbd2f7da00cb75993fd0a325f908768672968c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-phoebe-mocha-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0c65dc66483e97c54b8468b7f9233fd0f70b6e6e03353e421697a43a22ca46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-semantic-ui-development-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf9fa3d7871ff117c6867a82a58910f6a7327fe7bafcca683eb04b3bf6f4dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144044 Malicious code in juno-webpack-ceres-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489f77539ca50b4cd121834f2c9ffd7d72dc229c148b983939f45728486a3dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141705 Malicious code in dotenv-csv-jekyll-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f602ea5a4d3e70788dc52fbd3fcfd4afcd27d68f5d379ce7818d10fa011db3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146376 Malicious code in polaris-weywot-ganymede-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170d3e04ad289a69b3ceb68f5917088fd708a09b8b96f4ab8261e3123b32e2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-taurus-achernar-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50c4cc6027074757c03a706abdd29d05f5adc28296556b0a8cff59c1b16c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140669 Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...