MAL-2025-147796 Malicious code in sedna-start-semantic-ui-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca2e2719f9edd696a7a5d29b1c059a7717eae9f96696261990915eb6e34e7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144338 Malicious code in less-miranda-rocket-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be89cfac1299964287ae5c23da35e42fa60b5f6efa38ee5baffed6a9235ab7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141082 Malicious code in convict-playwright-eris-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd3b156740f71ff872f80c4d30cc69d2d1787e5ed6674ad7a025f35dc0f037d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139532 Malicious code in apollo-ursa-tailwindcss-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c5055c4409c3fb1e231a35760c7bde61d90da1af4606587d4ebb0be38a6c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139698 Malicious code in aurora-firebase-magellan-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3272640a822971de3458ad97504ba57f301f6d6bcbda1dc1e4aebad0245e47c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144936 Malicious code in meteor-shelljs-miranda-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6546914dd8fe611917e0f0472d9be7368d424b3c5e5960f338667205faeeeb1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147902 Malicious code in server-nova-iota-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdaac403aae9a7b4a8d1b8cdb71e3afca9bb3998c5e8bca566d34792db4efbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147170 Malicious code in rehype-gravity-rimraf-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d9d517bd3ef9e1ccc730fee6c77df43f426450953aedfa0e9b2ddac240292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145976 Malicious code in passport-auth-mongoose-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d85f744ac10f023e729b0938e368ce262176e72333839512dcd5f6d5f7e510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141828 Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141357 Malicious code in csv-schema-alphard-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a9b936ae6b74c7d7229c33b08bcb2aa9deea6014c2edfef4494e291ec250af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140574 Malicious code in ceres-react-bootstrap-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3b4e726dde90fa56bb930d14a2e37b38d2948bf534b5ec6b166ca2e2d78a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-version-procyon-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97544eba7708c250bf0217a4d6d35fc044a7f24def761a2704663da20a4a3e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-nestjs-csrf-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c4b1ab196632f9b6ebb055a9b0a9b392674ce1106cbea9ab8310a841e11e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-bootes-concurrently-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adc64a5812f65b3e49d253f55e9277f0ee5a6b021a841544785603baeb05ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-polaris-socketio-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765198641ce1b82606fdd938edd1346719d47b28422f609f5126548b170496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-rigel-wezen-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33794057c9b67622435866807b42bb0f7b61129614c9ca0cd1a14bf2ff9caf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-airbnb-morgan-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9c51f5e40a4ddac36f8b86442f212499800abc1e1634abaf64c3a22798a8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-zenith-flare-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5457b432b98f1a1c93c0545fcb9a402ec65ced668164a76265adace81149fbe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-figures-async-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56662d4f8f23678a960291b8d19f3aa545e75a2346fcb87bce99a7c591855648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...