MAL-2025-145089 Malicious code in mocha-pino-pretty-json-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d4a1e9615913e2d0ca96604718fc72033c8c2e908c507adfcc64735ee8f924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143210 Malicious code in heka-ophiuchus-cache-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a88089822f8c73b5b0395551f87a7a085394fb6497c4c9d5cc2a81edb29f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147301 Malicious code in request-magellan-nashira-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb038937d8f4ebb3e7b9922687f8503ee4277c16c3b7389a6dd6a4e4770f21c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143410 Malicious code in husky-backend-jovian-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fb4816498eab7cafc0d93672a74a76721f2a2f23303cb6d53ef05824210e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148598 Malicious code in testcafe-kinetic-meteor-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656c9560ccd17e180daf4aa2254dc60f3255420737a36176c05728b8fdec1786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141316 Malicious code in css-loader-soap-elektra-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02bd7db49f120b636f5d8a86022af64e2403f9c6397fdaa301235a9bca6c2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143927 Malicious code in jest-markdown-loopback-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60756963268718f1cbe662239160df39fab09cb6b8c7ce2669016770b7b08ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145486 Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9188b5e4608aca9ab9241332c97595f1497acd8c7a5c7f5ed46cfc93609c0208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142610 Malicious code in fornax-centauri-ceres-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4292f5a1b31a9d321a2eb9d21512f8235d0431796f54ab26eaf817f2c15b8d92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149344 Malicious code in webdriver-mocha-chakra-ui-neptune-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bae6e1365b5dc4da2b0ae42bd53023871dadfd16a3dbbf6c55fad3f62f4e8df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148533 Malicious code in terser-private-element-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256a58de5656427ce43274a191ffc9eef82d97edfae23fa63c7f134e0113a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145342 Malicious code in nebula-electron-relay-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5fe572a26cb12ea989b18242cbfc51386be972e2424a2d2223b5bbd8d58ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146005 Malicious code in pavo-pino-pretty-chariklo-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad8694ae5e9e2fb525de2a361d94caf1cc4b51939e350ba2974d62c71dff68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140046 Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140895 Malicious code in command-altair-europa-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4431958b7a5d25de1134d1791fd5552fd6b077c0313112a030d1ab074c1a4a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141623 Malicious code in development-kastra-lint-staged-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14251e09c02fef4bacf19a323b84b837d727b1fca4158504f2134a130218bb94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144723 Malicious code in markdownlint-lacerta-solis-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a350fe7ddc11ca9a567e3847734b551ccef89edc4b2674c0c9470a0aaef37b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148690 Malicious code in titan-pegasus-transport-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10990bdbf8ebcca8bcc01d9ba3c1ab248f0efbb2723319e0abfb784fcd048416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141498 Malicious code in deimos-juno-sails-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e4b06a4470db17fd32754a1e07a0049aa27cd7bbe27db48e0a893f47e90d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139223 Malicious code in aether-antares-nuxtjs-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea1a1140aa617b23f10af3e5f342168ca2ffa2f4239a65643f7b7a1a47e3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...