MAL-2025-143448 Malicious code in hydra-ora-npm-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce129e7fe90819908be64c2e70320963d6105ab17830b4acdbfc7c9331e54f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145862 Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43658c46bebb5ee585b5255be57e828215cec8078d22d2bbf56c9313f7277ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149120 Malicious code in venus-request-loglevel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628ad922bdf929ddebb5c4e0f9679a98b148d988f858aee6e97267b60eb8ee26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144225 Malicious code in kronos-sagitta-zenith-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af17388eeeb9c27ab19d91c1e43ff05fa1df5fa0feb3b0b941a1e1e2a5b153d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145792 Malicious code in odin-corvus-sirius-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fee67acece68dcfece32a0e3209034a208b1d4e721722fb1a87088b70c3792a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141257 Malicious code in cross-env-hydra-vega-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e75583628fc05638cf1ada99aca1c3b242199b18927ffd6aaa09110231c3784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139807 Malicious code in await-request-docusaurus-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede9ef0a4df2943e87caf38702373e341c5980d77060c18526a2c85fe8f11c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146914 Malicious code in quantum-regulus-xerxes-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14a1f44c2f7c4f15e67c01fa676fe8a3e69cddd184659b61b87deb61de9a5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital-peach-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e360ef67820510a0b6f73b56535080f3961e593c60ee32b21db7d19e0d4adaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obliged-gray-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04fe894ddc20327b2fb3e7036c84fe23114a4183385c745608ac91feb4a2778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-salmon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a442488ef5caabca8bae9b82d2a185abf2102a99144d9978ab6d56435bbfa3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-moccasin-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766fefabea1ab75df7bd4779927413822d03cb9cbabead84d4a76ff3416a9831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139035 Malicious code in spotty-peach-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6d0719b82d7975eae04cbccabd5809b89ca30b1486e425694e71f9a9d8d9ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138593 Malicious code in basic-green-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27433f0fa6bf15c5f4060e5f50fb47748d2d2ccdf05579f278a8b6f6d3accb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139079 Malicious code in tired-olive-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73abdcc3b62486ac5b6a9409fa344cd86a57dcca61d5268fb1bc7c2d8499823a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138636 Malicious code in cool-black-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b4bffa4a144b3196425db620389a92d7a27be809c413aab9631c73fcd224bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy-silver-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed825045165dc249d9342dc368258f6d714bcc564f49b26d0e90bd3529fa306e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable-olive-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b584a7dd32122542a704ecc8eef1b178fee04df2fbdc39fdf5de20861c63543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming-lime-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a0d2ce3084630b8aaaaa2ccee23d64366e300c6bde289088f5d116c6e2e395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky-coffee-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937baec00ac8f0904a27fcc57288a2842d8ae07618857a3812c607570368d851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...