MAL-2025-145378 Malicious code in neptune-request-hexo-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ed02bd25ed21d5f7601ebb7225bde8001cdb1d7df9b1567c9de1530a5417a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143857 Malicious code in jasmine-meissa-soap-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6109c4527fbe0c61110df548c7dd0fedf4f49d33856b8df215dc9363bbd0b512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141171 Malicious code in corvus-wolf-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31b0a4062c0783f6ddaa777bca86b4ee5d265da61c10b5f0a7b950f7bb3cdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149856 Malicious code in zenith-neptune-puppeteer-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10a2fd2615539814c75993efda49b5c595a87b90f8e157b39f9e05971922a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-shelljs-socketio-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490aff4c1c179342da3e777f17c60b78ba9faf7a9fb2a45ad908d73cfbb97433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147887 Malicious code in server-acamar-ganymede-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14781a39d6d69e629d547eaf40201c1ef2d60b600ac6c32935657bcaa9cd5a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149517 Malicious code in winston-ophiuchus-configstore-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efca18a04a8da345e7fd1ab9586fdfb34f3f346cf16ea39fb312943602e6a7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149697 Malicious code in xenos-zenobia-postcss-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e93a1b3cd01471b7d9b6c197d2d94f92723d90c6139fdfcd7711637980504d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142716 Malicious code in frontend-quark-antares-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2705edc75fdc673a8224482fad5b553e46f7fcd696e1c16c4557c29c33efa292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141504 Malicious code in deimos-rocket-lint-staged-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f320fb414260623d8c1a526f9f045550a542ff04f19f01905c40b250614400a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147624 Malicious code in sagitta-triton-rehype-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea9e88f146d6b0efe702ff462980629d348841c722177bdf682d3a2766d719c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143762 Malicious code in izar-pyxis-wasat-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9279999eb82f4ebefafb993331a9b1d9cc9bf542060779f1d7b327051dbaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145695 Malicious code in nuxtjs-astro-dotenv-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361f069c8f34b46d870c8a13f9857e804499b8f943a16c7ba015da58b6adddfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149551 Malicious code in wolf-jabbah-axios-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb514dc69b97db26c0206a29a61c0a101baaab726b1e5cb364a3d76a6c7a51de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147160 Malicious code in regulus-xenos-equinox-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f00ee715a6b212756150541df12747f82da8999758b0c2a03c3427413e7677b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145758 Malicious code in oberon-xanthus-slides-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564241ace50ae8cfeaf5ab8b4c943999f20cb66edf29bb7a2025370de13b0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148258 Malicious code in standard-rimraf-phoebe-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234b67294a0025692db16e4ca6d29b66713ad714b9107ebaac5b7d9fbf2fca22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147308 Malicious code in request-remark-sadr-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55198b1951195c04b8787ba7ffbd4ae734f7ff221bcd530b6abd49b8e709a72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144667 Malicious code in magellan-standard-izar-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6c3df629430f25effc5f60978bc3c26c40d1aeba741761cbad04b32aefacf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139155 Malicious code in shaky_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd5cd6e4b9659fadbfceeaadabe8b3c137cd2fcd97adaff2f97d46e62e1459d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...