MAL-2025-145568 Malicious code in nodejs-io-jwt-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78bd8f68e5084582ae008ffbde3628c1d8c5c11ab6dadaa29d7b0c2179fa3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140720 Malicious code in charon-csv-development-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e003bff80fbb2c9adfc58b7b1d2c7c219da1fa8d285b269248e4b07db64caf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143224 Malicious code in helios-achernar-postcss-loader-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72aa3bf1e9bab5bd6a52eb05ce85e1cd2626bc73ef8ab794ae82316c4d761497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144309 Malicious code in less-cross-env-enif-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51f4bd1b642b2fde0f784e6728bc41be9488dea6352aa752a2e1ccd2f2f7e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149705 Malicious code in xerxes-foundation-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e106167988c40bc173f487701891303d610d3df571fc17138b7208a32f46b453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143921 Malicious code in jest-electron-leda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afc2c02941b782a02116d029cc9e08d731431e5460f9652b303b188bbed9458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145955 Malicious code in parcel-colors-package-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8816a40a04fc78507feb370adc487c77333d15f2c73a6b91116e678b3fd138d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145726 Malicious code in oauth-dorado-gacrux-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717df737b264bcfe501c344b361782b8805db7032ba93e9e1a2a7bab4dafada3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147358 Malicious code in rest-nextjs-pegasus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2395e16f16fd91bb12bb0f7ecc86de9d718432c37009b24b2167bd90ad6e98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147654 Malicious code in sails-nightwatch-lint-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaba70c69ea7047e807d10d5242488b343ba93f28240c3d7528725e1f00a1ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139279 Malicious code in aldebaran-grunt-cross-env-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942dc7567872d64db37f4d53372787e9b8e5a11a4ea0f476f650bc9815625904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146143 Malicious code in phoebe-celeste-luna-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffe0d0c724c25ca5f6c7bd0c954b2482889ae6065c56568136b475e39442706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-cosmiconfig-impulse-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16aedde5124299a67704ac06f0b0969657a4ac78522a0130621fa3344d627407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-markdown-hapi-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4e9bc0187b1ff61b66ba57ddd7a30ce8d3ad9e0fee1b75f97b22b698a286c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-cache-delphinus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17dc1e6ba2a45dc12dceb87e28914ac9cd5001e8b6b6191cdd71a441cb055f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-mui-iota-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68e01de43ec016ed5269f79e51129c4519b0191192620c44b484a9d5b3d318a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-zenobia-cypress-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b58a921f0fac45950b56d29301be0611380aa3275718a518253a944940bc853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-config-pyxis-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33044e97e3977cc09085f4cd26c4dd79e15812db77ae419ce12855b010a0d7c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144907 Malicious code in meteor-despina-octans-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae65bf00ffa8318ec13c12d88ff9a10b09717907e583c9ad2ba69fee6708f1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139684 Malicious code in auriga-nightwatch-yakutsk-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35fa65ea2bd4d530b030637bffe1acb3dca16c267a6fd9f1f510158073ab3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...