MAL-2025-142527 Malicious code in flare-halley-meissa-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ee29dde83f4e0b8f16285588b90dd4c94bf82be8c4bcf1fd7b1f20cb507e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142095 Malicious code in epimetheus-ganymede-native-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f9e981e62d594dce3c76d2f3f1e4089d7417c37b7e7968a8afa7284894b681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148499 Malicious code in telesto-quito-halley-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e627f3f10e73632abb1040fef38bfe444561fc70410833337e38e8496d0e2baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147240 Malicious code in release-it-xo-quantum-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d834144b9f5a485169ba45b2774efb272a68b9dfe0a1f0819dca1d0bf3eb872d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148127 Malicious code in spectron-webdriver-bootstrap-auth0-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4dc39f57448875b8be8f6d2e20c57fea021b4e88fcacced609ad7670a9dbd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139936 Malicious code in bellatrix-eris-yaml-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d825d7641d6215aaad20f1c38ef478c8fe5bff6645108b2dc855cae94a207880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142467 Malicious code in figures-fusion-nextjs-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1463c83e9442351390e432473567d37b69c6d7f58d11c80760ebca55e7323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145877 Malicious code in ora-aquarius-typeorm-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9815182d10e31dc1de44581326864a8f0a321e4024f950a7cb6088a783487909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144218 Malicious code in kronos-gridsome-eslint-plugin-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49831c60df02a4ec563dc66764d272a886cb44223adb4887a15af6b9ab643b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143697 Malicious code in io-gacrux-test-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146490badaa1b12611a8763498d0c26ee5d80e1f64f417b1d5b7cc98eeeaabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145090 Malicious code in mocha-private-cassini-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc82190d8b17d1f57a30e12ed75fde26ae8e9fb09897bcb4bc0cb303e68b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141598 Malicious code in despina-hermes-changelog-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f593752911d8dfe88e08602cf920db91edbff3a993835df1bc6faeb4ecb3f785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-ganymede-native-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f9e981e62d594dce3c76d2f3f1e4089d7417c37b7e7968a8afa7284894b681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-commitlint-resolvers-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048db8edd78325c3e90ce4b067c733d39e621c74207f2eb16db312b39e5e4150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-envconfig-readable-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6697fea7d29b65951aa52d6a9e51701f0dd3f5832e77e69d3997f6e525d28ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-webdriver-manager-process-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41bd5e517f4c9f76a221414aa3aba22babf343cdb3b36796769efbd58eb267c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-dione-helmet-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d34bc74442aa852ab5dcc44cd33954927ffeba159d2a166a11da6e369b77991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-vega-leda-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbaeffe04cae6de02e05a62a3739a301bfa80d5c4d4353e8d1674a2144edc320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-pyxis-webdriver-manager-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc50e3aa929a131d682c28618a24b80bb1df55cb791d02ab06ddbfd580f66fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-uninstall-rigel-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5064093037affed56baffbb0373765a99c6ab2325928393136088d3d07e36625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...