MAL-2025-140429 Malicious code in carpo-antd-less-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd06c1c23d3f2cb03e4cf07ea26ad3cd85f7354f359c74d530248a1ed7cce40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145850 Malicious code in ophiuchus-vulcan-quark-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0d097941e96216c73a95323d1fdf14c3176c5863361cb6c73a54a9d94ca387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140731 Malicious code in charon-puppeteer-eclipse-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4dd5f4eabd9a3a7dbdd1b6c3808038d29ae76d949ae2e15e50502ade7eed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149237 Malicious code in vulcan-gulp-ora-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d843e4caca914f0ff69b775a2372f42a523768aee1e7918f4b8c6d01501f8268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149840 Malicious code in yonder-polaris-loopback-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f79d04e4807dd38afa59089ccfeb76f68af1b43076a330232e0bbe21e1da2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144155 Malicious code in kaus-socketio-blaze-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271214cea16cd84986d48c937872fb750393b1a48276a7270a1c97950bf70f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142480 Malicious code in figures-protractor-changelog-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6927adefae2b36f27f179178319310ec17e61ada0fa07dde6c9c2c00d2085a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148443 Malicious code in tailwindcss-helios-magellan-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbe3100900f2c9509fc6f154b180c84405648bb95b758aa7ea544adf22ad91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142319 Malicious code in event-pegasus-library-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a426ee6e9521bebc28daf065df779710592df13309fc8ad43f08f70caf3ad4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145696 Malicious code in nuxtjs-aurora-bellatrix-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094ec9940902eb2dd3dd6b6b2332f3acd59cb9f6135a3fd2616bee12fb70677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-lynx-meissa-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810b5250027e2e99eceb0de4313e2e7fa943040bf86079d15432fba5650741b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146999 Malicious code in quito-ophiuchus-jabbah-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66999af8e61119f23d545bd7b09220c72d04567456e7c544ab5c0b4e0198d68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-taurus-prettier-stylelint-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7c82516605ade34ff31a1afd6d028c24b9db892f1c0ea2e581b868bd8edc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143362 Malicious code in html-webpack-plugin-ganymede-test-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce127dbafb7b36a903aab9a8dc35f72cf667d8a39356eb117ad682d276e7a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-grunt-figures-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda231c4d5678c8527196a1d712d4e61a545a1c6d9e3939f6f3278a7fa848713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-pegasus-concurrently-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7fe80c5f58752b63fd91bf28f9d505788dc75fa7bb61bdcc83f8a644a53988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-apex-spawn-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71e0a1e9cf368723f79a82fb82524b86d059fa3abe85eee3b94013aad9171af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-castor-pm2-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa722926a8ae60af349b17ff1872860d4391506d2992ccf36b8508a23791cb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-writable-hugo-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd6c1658045523dd6514bb6c8f1206ffb8dcf071d21dd91e3ec9d33894ae98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-nightmare-lint-staged-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627490188d624c735a848cb635dd523cd82b8e5065cfadc66d9f3f5b1b727be1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...