MAL-2025-144422 Malicious code in link-sails-promise-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6d1825fa8d2aeed6f1fd7dcad4ee8994ab9e7c7f12f453f35eee3d1a8265ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146674 Malicious code in prompts-rehype-got-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9301ccb648a560bfe3f1006730b640d6ec4b2b9c6676afc853882ca75a2022d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141065 Malicious code in configstore-sync-magellan-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b18e24cfb2651bff070b27848319246fe6b3896b86e773f8ebc1a878fbb6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147419 Malicious code in reveal-md-oauth-jsonp-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942efe758bf59cfbd35ecde32f1b9cba47a8915da2bea6632870da311e5ee031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149847 Malicious code in zenith-elara-proxima-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41d9ad00ce10402bcb84d375b9c2b0e19568cae242110fe27e150e1252f2682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149642 Malicious code in xenon-bootes-local-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1ecdb72de6b1e69ec858424fdc0d8d7ae8020b292dde4fbc821fd802480490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144906 Malicious code in meteor-cross-env-promise-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb174c4e59f8d419248b9974b4055adfa5d6c0cb04323bb9ba94eea030294ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145800 Malicious code in odin-mysql-nuxtjs-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4033b37fcff598341cf0941569995dbb2e1ccdc078a67df628d3d6ceaff93234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140175 Malicious code in buffer-transport-dotenv-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d83035ce63668bd4eb199426469192d2492c2d5e513bc731b0d837d9e29673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146481 Malicious code in prettier-plugin-markdown-eslint-config-middleware-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426eee1ab89dd01a3adcd9ec2406476a79aeb502c22ae7e6c8fd4fe9d4124d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145352 Malicious code in neptune-aurora-backend-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfb10cac4b5a1dfb6a498b2742fde2ada9966efaa48a9f65f9142d0b3af950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149470 Malicious code in wezen-spawn-oberon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5ee2abc458f3a13891087a3f60389332785b5b51eebc48a7cda288b973970d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139141 Malicious code in horizontal_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc79bcb5a81f82f8ed7c71ef14f19bf018e96b359898de248338dc73e1d6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lavahala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0cd59a7eb6295d7f3e73580981b286f953cb7a25ddc84543be740204c31964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af86dbd8d335bb7ab0960cc1ceac104618c08690daaa5868155958023662b55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df460ff6b76f4f64063dbe2db77c1239448df591e6fa7426bf036843ec15e079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive-yellow-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347c0a4bc6c6dc50164f4938053abfe0fb420772bc5eb18e843d0551531f3155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared-beige-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a7795dec554714ee6d12138c4b61dc1eedb909e572d48fa3de60066f609362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate-magenta-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035421f4cd958a5d3b454ce933b042be38d92c3a1d1f1b89d7b329c8c2f60531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing-silver-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522a8b5b9ad0e1e4926c447833fac5958ed81476318ccd064918aabdd03d0795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...