MAL-2025-139700 Malicious code in aurora-juno-grunt-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b678e6f76e896515da8263350bb2c055dc7d0e32726f5a2066eac0f4cc0124d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145154 Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8084099cef506937c5e9d3511caaca023bfc949630af4a21c0c58b1b485586b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147855 Malicious code in semantic-ui-pulsar-reveal-md-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48a80d995eb8677aec2ff6f9f1e190ddc765ead947e37559d1412568a96be99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142679 Malicious code in framework-dynamo-react-bootstrap-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de049a6db6a95c67a2bc0734868704264651f3b278204b15e772e2e7561182d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147007 Malicious code in quito-umbra-registry-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef2cead8bc437414921c520821083a4ff3b65865bf0b3b088799fa0c5de2657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148379 Malicious code in superagent-cross-env-csv-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c342fb3e60fa2afceecf9082d7c1b1dea1e6af2b2fb452d854bc52c3d7d9892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142537 Malicious code in fomalhaut-chalk-hugo-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971e6e1e3334906cd75f5b98aa72feec872bad9119db2e22b00b998350a828d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144677 Malicious code in magellan-yonder-library-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cad045e630d35fdfd26cc00256788d518deb53b5889402c0e75ee53451dd16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142893 Malicious code in gemini-callisto-regulus-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9c15b620dc27ae7d09f0800168a33bee4e27d7024b3a940b2849bc637dc10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143756 Malicious code in izar-fusion-thuban-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f9670614738f516319ed0a6688e53d7e0a4d3df2f4d2e7ee43bfe682c16b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142176 Malicious code in eris-meteor-dependencies-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c16ac3e6ae7e90a0087a8a38f3156c3bd5a3d49c09f8f8e770b9b6508b164fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147283 Malicious code in repository-transport-delphinus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0fdc46c42635553bfca3774fe744b2f18d608d3c3168032ef8cc6d1e097991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141644 Malicious code in dione-grus-phoenix-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494ecce21d08eac72158feea6c2b6dc15715c53cd8b661712a46038058fd3872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142341 Malicious code in exec-geckodriver-octans-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9229208f0bbf990d1891de79b9d2b99741eb73cfb03133c03e8d495f8f34529e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148204 Malicious code in spinner-node-config-sync-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c53e550c282796bdb8410e7fc43c015ffa0b924311c3921e6542818028eee58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145153 Malicious code in mongoose-heka-vega-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383847364a4a6c5347ff15734218a9aa69c6613e8c82fecc6e11e4bad9d1563f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139206 Malicious code in adonis-antd-delphinus-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67bc0a1707357c9d466d2e7d4f959011260827b16ffde920d633c65f07fb536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147162 Malicious code in rehype-auriga-google-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673cbf0729106f6a375f1483305e9e1799186f99e4954e4f043d47daf81b8445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143859 Malicious code in jasmine-nuxtjs-terser-webpack-plugin-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122079d9ca0cc4f5bf4c3860f735fbcb36bfc6b3b7d1bd0a7dfed0b6c375c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142353 Malicious code in exec-mui-fornax-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f47e73a851455aa9dbcea6e3f0a72af9c78bd18d708c86f524d78b0283887458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...