MAL-2025-142480 Malicious code in figures-protractor-changelog-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6927adefae2b36f27f179178319310ec17e61ada0fa07dde6c9c2c00d2085a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149018 Malicious code in upgrade-jovian-yakutsk-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942daf1809f1a933ec556875072240b54cce259a5cafdd8782ecc48976749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140429 Malicious code in carpo-antd-less-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd06c1c23d3f2cb03e4cf07ea26ad3cd85f7354f359c74d530248a1ed7cce40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140731 Malicious code in charon-puppeteer-eclipse-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4dd5f4eabd9a3a7dbdd1b6c3808038d29ae76d949ae2e15e50502ade7eed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149237 Malicious code in vulcan-gulp-ora-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d843e4caca914f0ff69b775a2372f42a523768aee1e7918f4b8c6d01501f8268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149840 Malicious code in yonder-polaris-loopback-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f79d04e4807dd38afa59089ccfeb76f68af1b43076a330232e0bbe21e1da2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144155 Malicious code in kaus-socketio-blaze-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271214cea16cd84986d48c937872fb750393b1a48276a7270a1c97950bf70f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148443 Malicious code in tailwindcss-helios-magellan-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbe3100900f2c9509fc6f154b180c84405648bb95b758aa7ea544adf22ad91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144332 Malicious code in less-loader-stream-apollo-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4c3f57d021643f309881fcfec23ca4ac61c886fc4619fcba72039358590d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139616 Malicious code in astro-redis-telesto-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace80ece3eb943681bffd65c77aca3fa03730f975eb6c4b2df89cf6ca178c3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146685 Malicious code in protractor-event-meteor-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b5466457e913232044e97ffd8f47292ac4c038ca9675f86cf57212134a556e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145850 Malicious code in ophiuchus-vulcan-quark-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0d097941e96216c73a95323d1fdf14c3176c5863361cb6c73a54a9d94ca387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141957 Malicious code in elektra-zenobia-webdriver-mocha-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123acbb883945a9247d7d3d21ef8b7f1a1e3cd9362cb574c9125374cd3afeade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140074 Malicious code in bootes-deimos-tethys-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf8276b237457929553c4b5e28b51cc0edc14043dff26620640248f1d6fd96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-query-gemini-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca14348c26ccfabf91c669c1372240b7bca296b2bdd6003bdcdffc57a236249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-unuk-cosmos-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce898b52c94e42ee07b7975ef14215d4954b631a47a0c5637fa525a9742b1800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-nebula-fornax-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c11c5e234551c51c428218f768448a985e46be8ea1ada6b02335b438eb02b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-yakutsk-celeste-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90591d766829f3a790ea4d9c1652e0505ea1c2f38420ac201bf0912f328d2cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-xenos-forever-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037cbe531b734ea1d67a651682ecfb3115ec8a3abe390a6a187266e51cbf4a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-hydra-vega-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e75583628fc05638cf1ada99aca1c3b242199b18927ffd6aaa09110231c3784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...