MAL-2025-147771 Malicious code in sedna-iota-levels-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744cabdb165808ad9bd58d5c3f7c698c27357476b3e8f2562f1598aeb2a9c57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141464 Malicious code in dagda-castor-xo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139616 Malicious code in astro-redis-telesto-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace80ece3eb943681bffd65c77aca3fa03730f975eb6c4b2df89cf6ca178c3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145313 Malicious code in nconf-elektra-testcafe-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d45f11da5260377602e2a2dcba65f2ebc42a878b0040f31dd4e4a92f948efa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140045 Malicious code in blitz-fork-umbra-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ed6fff075c7c8191f5bb8ca9ceae5566724e352dfc03429d19a8afd34aefc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144795 Malicious code in meissa-bunyan-loop-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2570039e57cef0e6475a2bb439694e2b71ad50221717be387abd3674716b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145670 Malicious code in nova-umbriel-axios-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a48b5da8558a447c6380d7ad1dd3f14468d26f6806f41b77ccf389e6b1ab712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142319 Malicious code in event-pegasus-library-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a426ee6e9521bebc28daf065df779710592df13309fc8ad43f08f70caf3ad4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148432 Malicious code in sync-rigel-prettier-stylelint-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36fdfe2ba2f55f9166a1ca14e1f32bf78fab47697ed4a1450f221028760010b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146314 Malicious code in pm2-sync-convict-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141063 Malicious code in configstore-rollup-nconf-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b379eadc5701a4e95b8bc8f0981f9a92a62039f671a5531e6e5821e61350d4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146695 Malicious code in protractor-pm2-cosmiconfig-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b442cd6b7fe699a932768c2d49b7787c6c6819ff639e44e5280a215be7563f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147127 Malicious code in registry-firebase-less-loader-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60351adb0546cef9790a9625fb2dbb847f363ed481f8fc352d9657ac57c8b3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141035 Malicious code in config-promise-weywot-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec8c31de4eaa83af600a570d4fbd1f760af8fac9a73751a0902d639cddafa421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146771 Malicious code in public-zephyr-neptune-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072d15f062054089466bfebb73e1f6dba852a9ff2763e0b168a42e2ae7742225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143514 Malicious code in ignite-halley-jovian-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641352305dc2f90655fc051c707ae15f10e5b860427930d87e2b807717cc2ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145177 Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147000 Malicious code in quito-phoebe-gemini-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a11779bb8f094c8776a654b9852e5b629a889123b47cace5c89f5a2a9065020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140519 Malicious code in celeste-pavo-sagitta-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843f2c4b1603c2df6ce963cf271709d299c53464b9cb23dc1b53e9310420c00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149748 Malicious code in xo-electron-builder-passport-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4258594833b0af81aec1a8b3b0c76e3583e9312af81300ca476bb04013958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...