MAL-2025-142320 Malicious code in event-prettier-plugin-markdown-halley-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd30929afe52bc277b4d8b06cd079e5fbc315319642889508b0c4575f162821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-passport-sequelize-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de45bfb716eaeb6454afb5c70c2a2b00a793a3ec1e07000068e8e5a5544abfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-duplex-ursa-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6937793f75424fe2d5f90958bdbbc1a856bd441f4ed9d7ca875e9d24f80bbf65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143627 Malicious code in init-nestjs-loopback-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf610150045073ae0d0481664a90fa69a332cc012f749af053d58550e00feaef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147574 Malicious code in sadr-process-ini-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e99699493d67b9e69638403e5ff42e8bcb51dde5d15221340e4921f8cdf49a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147060 Malicious code in react-bootstrap-hapi-init-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a589dd8251f7b312b8b946a84cf1993ef7cfbe4e05c8ccb269fd98890e23d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143193 Malicious code in hapi-mutation-kronos-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bdc578a7fec9fd4801c1e1ff21a48a41a4db300c24f4d6bfe34230edd886b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145945 Malicious code in package-scorpius-kastra-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13206989ca281bd8486109bca034dcd43687f4928eaf2c88002dbd6dcc613c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143355 Malicious code in hexo-zenith-cypress-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209dbb5037c02adda861958d0b5ac85293991d0133aa42e846b822f3389038bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147303 Malicious code in request-nebula-prettier-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6904df3c29acc13129dbabea9ca2ffda6cb95d1e335c75ca6645409127f0073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148529 Malicious code in terser-meissa-kaus-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eca9100d0d234f4e9de5100fe27255c387d9e90e576451cc687932b4771b9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149085 Malicious code in vega-callisto-apex-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbed3cfe68e3a74b472ac88faa9c8d2bf8dd3dd2614d6a118bed34e17c7d1c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144497 Malicious code in local-run-script-ophiuchus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb8344fa0bf708a5d389890c5264e3d60bb553c221469e2dcda9bf9d1a03281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147394 Malicious code in restart-quark-fusion-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c631713ec6fefd9d7cdb0891872d6a826be32ad71a4c25f3a8e2c3d9b5221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148208 Malicious code in spinner-quark-geckodriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8529485bb36b06d6a5e7f1de1d6573433b873e92ec2d13dfdec664b1187575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149344 Malicious code in webdriver-mocha-chakra-ui-neptune-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bae6e1365b5dc4da2b0ae42bd53023871dadfd16a3dbbf6c55fad3f62f4e8df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140654 Malicious code in chalk-run-script-prompts-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ea2258006845312d46ca56f78e72c5ffbae2d7e22d59b5775e81b258d8558c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148264 Malicious code in start-barnard-bellatrix-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca1529eb0cb56a1c63d39df7055256a40cc90641a5729e731162c15c16e0534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139908 Malicious code in barnard-hyperion-warp-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5612903c54308e3be1b0a0e6cdff1d50c3feec5ba320d1f473057988b0c4f028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142011 Malicious code in eleventy-remark-jwt-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc239a2ed1afe79b7aebfbbb3f1af622f246000016a43b3cd5e61154f7b71eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...