MAL-2025-143092 Malicious code in grus-envconfig-halley-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685e558751be0ff44bf9e4c96d7586de4b6b3509fa5eb90db8718448fe4a02a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141443 Malicious code in dactyl-galaxy-quasar-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86057f9e811638ad1ceaecfbf45565c63cb2d6021f27fd1e67c878f87e002e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144507 Malicious code in loglevel-dorado-cygnus-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20dcbe7930e4780eb2a5484ca95bfe14521c72f890429e81afc68209d96c2ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143250 Malicious code in helmet-deimos-enceladus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6e531a39369437b0527d81e78bfd05af9e42257dbe3cfc838ba5a7f11ebb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146165 Malicious code in phoebe-nightmare-npm-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774a47fdb518927067c69933219ba0bfd8dbf5fb177ea54f167901861846ee65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141782 Malicious code in dotenv-safe-wezen-loop-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfbd1335926adf07b4842df69761df017e389eb233b6ad9b629bb51f25ea4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-eris-halley-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb67b048a0c6e8814eae9316db3934da6078e2a0cd2b8227ba096492e3f4d96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-bellatrix-orbit-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beed952ff5c447276e9850d9f01f562419a7b51dff21a62f1a8668d20d516965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-pulsar-child-process-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf5acc9aeb09f39172e1ddf5a42d3c2acc0f8f2bb42d69a683d266971cf6452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148317 Malicious code in stream-ganymede-semantic-ui-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d2d21c2aba42884dc74a9306d2b5780925eac3e6e9fbc5db65bb2e22d780c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144988 Malicious code in mini-css-extract-plugin-postcss-hapi-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01be8cfa96e4044e64f8c668c0d1417368b0897ee88586a73bd7dd7c873c629d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147122 Malicious code in registry-csv-corvus-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8533a9b1ca45fd27e66682a0d0a0ab2095d395ab5a7b5b0e0ec55e3c98200d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145398 Malicious code in nestjs-local-less-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a585851bb7e48da08bdaa215566063a5c8743693cb1a4763381e603664cda19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148586 Malicious code in test-umbriel-postcss-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653aca1f1686de272649e61e1bde312c3bf99f0ef8ab440834e77b4c521883a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144580 Malicious code in luna-query-hyperion-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6703642c5e7790979d8f6356a5c1c0a8f05d50e01d7fc6bcf2962a0e0c9b2e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147777 Malicious code in sedna-mongoose-mdx-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685c7f1a1ccbaf9d2854a73087c26e670062432dfb5c8300287384444aca577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144591 Malicious code in lynx-dotenv-safe-nodejs-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6919ad399f328ce955067abf86547693652653aed9b5c770929d62db585751ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148587 Malicious code in test-winston-eleventy-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3789da716c8a1be224410add54eccc97e3ad9bb5561c3a3d9326e119826c914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142631 Malicious code in fornax-loglevel-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4564c10a88dbb40742a117cd51e90da16d563a33c2464c01b686df5490cb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142791 Malicious code in galaxy-materialize-morgan-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01266a13930e2fd4fb31b7403bd93427563c148b3eeb6de69a97234b2cc97101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...