MAL-2025-141113 Malicious code in cors-aldebaran-aldebaran-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fbad0e36204591df10ee8666cbe61cee4d9d90e7623bcc6a1c10593e34ea94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139512 Malicious code in apollo-fornax-mdx-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01371186693cd024e100ee510bb53e5d734a9461fbc86607990f005fe83045b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146706 Malicious code in proxima-auriga-luna-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc49a5534846ee216e1649c7299a0fb3a5fa939dbe2741ab3b04cb4e71e15b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142586 Malicious code in fork-duplex-request-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e738a11e30835b56b26b4fc6d11d4de4707343ac26462423c3509933099f59d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147227 Malicious code in release-it-nightwatch-jekyll-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5796729233de51edc8c296497cfcabae7b685d63f4f1c6a8c094d2ab4513ade2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143760 Malicious code in izar-meteor-nightwatch-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d258d1a74582347b0d7071902b081a7b884336ddb8de8ea8700151566361f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139456 Malicious code in antd-google-hydra-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d85f40c521d390c13055ac239cfb90c2232db83fd4b38f76c3648973e735190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139375 Malicious code in andromeda-csrf-got-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b156646e5ae6831d28447dfb85a6d23732f46c59aebb936a8622ec2da9d24ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensitive_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66410a0bc1e30fc0454724628ceba7714eb23da1d2d92889673e46b130e2946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139133 Malicious code in breezy_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6fab2173a7e33e37c325feb876bfcc3a7690d12c4313d99bc2ca5861e5c27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breezy_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6fab2173a7e33e37c325feb876bfcc3a7690d12c4313d99bc2ca5861e5c27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware-black-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93110aaf098d52d787512c3c81f3d40b8d4d47faf9aa46ed8672588e2f65f08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared-beige-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a7795dec554714ee6d12138c4b61dc1eedb909e572d48fa3de60066f609362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in permanent-bronze-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085154849ecd9d851b716739801e5575c18af0883ae093750a41601c128ef731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-blush-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32f6df09387d966b3d14c2deb992251c6e5e285791c8d546a0b6510a4462340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-amaranth-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d270e11ef4012653ee53b617b958f166f6f81cdfd07cefaff96c7145bbb5886c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean-brown-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667b6d921aa0047b0df7ef9ad2f456d4611b1e5776c9f15df357aee012618ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused-sapphire-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facccc3d60d6cbda653a56b9fa9bb0dfc19cef5b28deb7b6304179b1b6278c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean-peach-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f0eb8e7ff15d8e0b06a0bee607b728ac17fc1c07735ace0058a7f88a933806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital-peach-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e360ef67820510a0b6f73b56535080f3961e593c60ee32b21db7d19e0d4adaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...