MAL-2025-144460 Malicious code in lint-staged-link-promise-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea094eb5bef67aa642231bfa689b8f67908ebefbd7fb7bb0ab8b13e9c92a4d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147439 Malicious code in rigel-radiant-uglify-js-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85630c33cb4c0ec6a482317d825de7dd864dfc1abf5642f7f91212d8139d7c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140562 Malicious code in ceres-dione-materialize-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4299ee1b5a3b953487ab291e6ea99362c4b420b372a5776540747c429c4155eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-leda-xenon-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c919975392789b84a5ad2ae76e77c08567dc2d742f2c82e0e350e67652b7552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142581 Malicious code in fork-carpo-xenos-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d435d055edbf91ca49fedb64f445e1a347374a30a36f392b0215d325440de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140737 Malicious code in charon-thuban-axios-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62878091dd31f40a00204cee8df3fe4229ddcdc28f34c23574e6211e92f6ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-redis-jwt-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029211974165cff66e42351cf6175e104e89284a986f021fc112f1c0b00c02c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149863 Malicious code in zenobia-bellatrix-gravity-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c29f1918a6f636e7b6bd048f770510b7604e2b3c0b585ce4537f242137fda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145647 Malicious code in norma-react-bootstrap-commitlint-config-angular-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2830a2fb96d2b57865f9092fb10f30f5a3f718fe0e9e982c4761680dc9e7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139849 Malicious code in babel-cluster-zenith-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f977b338090844b6481ac64a9e37f943917cc5613c463d25d52acc8f6557183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139677 Malicious code in auriga-figures-karma-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7e3a0d376b13715a52ff3847b5b8c3c11a9b9944d6df465841ca5029f962c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141274 Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145514 Malicious code in node-config-leda-test-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a21f6351d5a2036a3bd77b33eba4565d2a5efd4c25ee98e9a3019f669aef35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145153 Malicious code in mongoose-heka-vega-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383847364a4a6c5347ff15734218a9aa69c6613e8c82fecc6e11e4bad9d1563f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143622 Malicious code in init-gulp-eslint-config-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a30d3a37f8255998babc71377202ccf693a25e1a222974689725548e7eff2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-phoebe-materialize-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77c740aa11ca859bb2f0ff0e894580beec61fa56684a200b3bf75cf08ef3ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142651 Malicious code in fornax-react-bootstrap-phoenix-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd1f7f3c597a5a98d0f02b38ae7147c321a5db0e4ed178cf4dc828ff939ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145821 Malicious code in ophiuchus-izar-kastra-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328a62d2bcdce3b83d55aaaba84a4dc4cdaf49d7d16d020310bc18f9c6672de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145150 Malicious code in mongoose-dotenv-safe-fornax-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec74ae400b0640ddf9fcf4390f177967e895d9cdcffce66837c6fa60cadd3106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-winston-rate-limiter-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32100a3259594ef76f131d5e2f949bf6d101cea8093c1c5dd99660e9974f9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...