MAL-2025-146762 Malicious code in public-meteor-xanthus-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73757b5db68e1524325daa3e7b2769567c1ffde5bdf48127d22497200dde59c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141416 Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7bd00c7ac28604a872f9aec913094464d5a6717e2f388f33e390d88a8f4360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144917 Malicious code in meteor-janus-await-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc9b9ed01714f5ed46a16d16f8f9fecdea619e151dd7ff7dfb534084044ba4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140612 Malicious code in chakra-ui-eslint-plugin-dependencies-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e7a73390160c376cfb3e4a5257b5aac4adef6048328297cde111fdbe358c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141679 Malicious code in docusaurus-sync-aurora-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de322dc14cbf09d6210fe4f1063f229a8881ac8ba3a9ed3a70a31dd85cc166d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139696 Malicious code in aurora-cache-soap-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ced08f984cae28d25fe2b4810bb45fc53cde4f66aa701e9112f87a78947c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144085 Malicious code in jwt-semantic-ui-nuxtjs-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce61a1544c50500c9f832240d3b153ca30544b6968fd92fff24c6576d0beeb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147495 Malicious code in rollup-eclipse-equinox-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d12da5b6ec2aea61ffdd55200ca99828c12b9cf613f2732780c089bff606e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146828 Malicious code in pulsar-duplex-chakra-ui-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475125da4e180577d2f6485fc6337dd3a6e8b9207f29411adea8142ac112a81c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143716 Malicious code in iota-configstore-sirius-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89652821e865f568b1d8439feedbf080785e427885c6c6dd0d0cf76b0115d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141471 Malicious code in dagda-heka-phoebe-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e78cb483a820d8e1e8684031787f848f86aacfb5b8fd42e52305de62c17bdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141992 Malicious code in eleventy-callisto-forever-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447abbef07e2169825384d0a4f6cd21674555dac84ac23aee274c4866a00fc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140772 Malicious code in chromedriver-foundation-ophiuchus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734cc0e1a4fdbcbaa4277defdafd1411ff42c898978cefc6ce410b296ec7f58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149779 Malicious code in yakutsk-resolvers-phoebe-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f5fdc72d93b4fd8896a336557775e4a55ac8cfcce0a6c6bb257314f79673ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148137 Malicious code in spectron-webdriver-process-yonder-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2343a8b6a2e8295b3328b4128cf6c6b8baa22c2f0554a20601126bb4be94ec50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147516 Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5763019dd989f8dbbf267900bfeb1126a620a032c9813daaca52b3a21676a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145311 Malicious code in nconf-dorado-blaze-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ebb80e8bf00b13131bbcd85b50a8f37549e9e91d183e6378da97c6b1847e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147748 Malicious code in scripts-sequelize-init-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97c59d35e035c1d1dae8c136d0747c24a153a8107271fafe2a54c93169f2310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146444 Malicious code in postgres-phoebe-vulcan-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9632141f99875ffc9fbf70152449e5eaead860830d394556290beda77221ac38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146424 Malicious code in postcss-vuepress-nestjs-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089a9bf327ef0f08b1005680b1873ca15774ecd7a823578c1712213ad740d477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...