MAL-2025-147565 Malicious code in sadr-jupiter-jovian-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc7e063658215b0c112e54f4d6bbd95b31dde9133123195364ac48534b2985b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143062 Malicious code in grunt-envconfig-bootes-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f83987625a5b22f96ded6fb57b3a5b08594ac3a45b079c63a6905f3a226dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147589 Malicious code in sagitta-commitizen-xanthus-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a116873bf32c289aafa5fd60f4935b886ca7e2741da3cc20430738596c680c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145115 Malicious code in module-run-script-telesto-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8e775647732194d6b76c1473464110ee5ca19028fc5f1464b33e020e37ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148732 Malicious code in tool-cosmos-vuepress-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f837862e72b2e94064b9f5e5c1e83988a35c9b9bc817860e5cdb806edf86ee84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143848 Malicious code in jasmine-carpo-scorpius-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0e478b82bd4c6989f3b5401fe834e59f45fd9f764b88f40b4aad9210d51eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143869 Malicious code in jasmine-uglify-js-cygnus-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68c8187bb9a4d759fc7a92576e1862dc9d507e32cff5c91a862a9c51dba18dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142954 Malicious code in global-zenith-child-process-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc3e9083ac9cc969092f7cd408f8a229dfb5f42f62b6082200569f22f0c57fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147170 Malicious code in rehype-gravity-rimraf-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d9d517bd3ef9e1ccc730fee6c77df43f426450953aedfa0e9b2ddac240292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147319 Malicious code in resolvers-celeste-antd-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e4cef15b804d34241feea86545e5b71b9cb1ccf014f30da9512e79a4b156da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144320 Malicious code in less-loader-element-ui-telesto-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091e4c1a8b60123a2b2d436c5a524817831c21f9b7f3477496bb5ba467fb5473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139509 Malicious code in apollo-element-ui-magellan-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba972a9af2c18c32af8952189c8f1f93988448b04dfd8f4e96bace6ca92a2058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen-bronze-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d83b0a960d8ffa5be828fd48039efdd5f31f2970fee98a20051830da6d4e9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138851 Malicious code in lucky7776329 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c92c8f08edae8528d35b61c2534dae4487c2a062d37869ed4b082ccbc1027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138817 Malicious code in jittery-emerald-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04db678b098a8dfad59ec0f2a60cc57030078dd629dec285d829585ed6eea3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138968 Malicious code in rear-plum-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffd81f1734d7fa552bd5594dc59d95992e061a66053a76bc90bccdf93c4904d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138640 Malicious code in crowded-coral-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bd82b3629a0b84b5e83f10a271821958279c419583ffcaeea63638198a81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun-coffee-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9293f754899af91b97054d6cd10012bfe309ed9d770febc6f6dc038211f422cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary-bronze-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eba78c701c91e88fce0d28506d839c47d359be22863e170d20f40a50262e76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient-plum-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665afb222b38618c8fb7fc4731102637f58abdee132b4300f3001985c74f12e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...