MAL-2025-144855 Malicious code in mensa-hydra-ophiuchus-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975502bdabe66180670d191f6d6972defd72b26fe8d949223a83143d48948ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140772 Malicious code in chromedriver-foundation-ophiuchus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734cc0e1a4fdbcbaa4277defdafd1411ff42c898978cefc6ce410b296ec7f58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144797 Malicious code in meissa-chakra-ui-cz-conventional-changelog-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f285c7d45797112ceab0a231619970762984e8ac052e668d9864ec4afeba50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147516 Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5763019dd989f8dbbf267900bfeb1126a620a032c9813daaca52b3a21676a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145445 Malicious code in nightmare-rigel-playwright-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c7efc41fad8d61f889b7eebf60a8ddb47d40233875ab87da2ce0fd87cbef8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-hapi-soap-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b11768cae9dce591b19f0b3aed2b0ce4d5df76c62962d608ab48fae2fe65d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-solis-nashira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e063306d0ace405b4675d9737c8065008de10a8d47a009069e48b9c53f1b196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-exec-foundation-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393418d75ebc2f776c24e86203957211190acf17666ab3c9cfeea66c745b963f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-antares-browserify-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b28d60f9afefbbf9290d01ff6e7f8a6fcbd00a269b5f91c6f21187516bfa63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-chai-deneb-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9fb6478dd3638f00e16753a5839c017c4696e62a8cb64c5dbf9b7518f59cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149714 Malicious code in xerxes-playwright-quito-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64cda26e6f69e769852c6b4cefd15c3800d63895934ebaabd557f880c5564f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141471 Malicious code in dagda-heka-phoebe-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e78cb483a820d8e1e8684031787f848f86aacfb5b8fd42e52305de62c17bdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-juno-restart-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1529634c79d2d596ca99ca60a3e80f312665dec3ca32c4a8f9cc1e4968848b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-superagent-altair-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fcf6a2492e6e844fa212aad4b5f153914bfbef29058a1a1fbfc033f3b2529c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-convict-juno-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd09aa128504dfe01d7d06581a8d6530ecd19d02baa8186a06612eaee198b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-blaze-pegasus-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649ba8e5f1092cb16388028b23ead6b8f6e1199fda7ac9c199d2088db3c03feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-nebula-prettier-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6904df3c29acc13129dbabea9ca2ffda6cb95d1e335c75ca6645409127f0073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-kronos-figures-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb27018f4f80f4bc6b981bd4783b7165ec1289ff35009e4723281ce7b6b0d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-yaml-mongodb-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e80b370234a89e5ce2fe90376d18afeb01402b685d4abaabdea8be5893c4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-titan-eslint-config-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a7feb3c4ffa3c82b81a27ccbf2b20e0f1e93df88dcc9fca20cbc9c42eb9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...