MAL-2025-149593 Malicious code in xanadu-deneb-non-blocking-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed8eae916437f4396d4472e5b2e80860392a6b8fb1d4c93e30e3815f60809f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148380 Malicious code in superagent-deneb-mui-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e52b99c6fcff081e31ec483416e07155aa049b9fecb93cb71ba0b66e3642d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144417 Malicious code in link-ora-gatsby-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2cbba5177f393474a7266a1fbf0f8ee23ba7cb420d9d2f5792a280484e1655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145653 Malicious code in nova-centaurus-telesto-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bbc66b20d8d504c89d9ccde8e832f98bb379a688b9c04e2ed6dc9641f1d34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149153 Malicious code in virgo-eris-cordelia-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6aae70f9a85170a09805294037f5b15256af3293503306536d38e121f985ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144190 Malicious code in koa-development-nebula-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44bfe6f31e8ed996f1f924f50f0c5358b6063df84a2947fef4ebcf2eb5af7e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145349 Malicious code in nebula-phoebe-sadr-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5208ccc41af2c843d0b1d835d47e794441dfe0f3eaaaca4f890d1c07a484324b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148177 Malicious code in spica-radiant-await-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9f9a3f881cb11fe0d8855419bcd6658ea71a4049938253b6e9edb76c72d7bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141492 Malicious code in deimos-gatsby-config-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e0ef6b20e01abb0c888a4ffa0a1c801db4dc89a89b1840fa59da4f1345f654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143328 Malicious code in hermes-stop-uglify-js-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16dcc90e620362e4bd555b092eb9d0b9b3ab2e93e176b6bb7ee96fb441b8d923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146947 Malicious code in quasar-electron-geckodriver-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a63df6708cf72c0b4c2dc07ecbb3b9d21ca55caa3ad7e1917c8c401d9860a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147918 Malicious code in shelljs-library-development-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3656af8447eaf132ade4da48311dede7839d72f50c653ff9c19ceff030aff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141047 Malicious code in configstore-cygnus-envconfig-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6200864a3393beb6b64d622c2e8175095b42f4b0a818f66e6df20d44317435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144753 Malicious code in materialize-rocket-standard-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0709cf7247b61cb50046c0d471edd39a3f667382a74aa4aa13b18ee742f99d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149215 Malicious code in vuetify-mysql-lint-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e958a5bcca9ea2f84328c7daa526a389b859860b4d93dace6e50ceeaf6892e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140761 Malicious code in chromedriver-arcturus-pino-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7270b9ac19aad85ea7e97512b7bb3c2f8a2d344649d14905875aeec372a852e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145554 Malicious code in node-sass-sequelize-init-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9820827f29fae3624ef8497c12accae1a6246f1b4a7a18bbfcaead007b9200b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147322 Malicious code in resolvers-eleventy-hexo-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87b6786994febfb1afc398841f0dd4df876fad2856e69dcdc93eb4bd810a16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145350 Malicious code in neptune-algol-carpo-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa51c8554a0bbaf6391715e061be40893cdfa1063c0ccaba1c1b12720935395b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148338 Malicious code in style-loader-repository-command-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41665413ec7cc5379c0467f3e72ea87d611155d06a4f47a791bcec9e4d127fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...