MAL-2025-145813 Malicious code in ophiuchus-duplex-koa-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026985088b076b41d3553a135400fe4e6195e5a076210af526056f647ef5ba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139363 Malicious code in altair-rollup-bootstrap-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf705e24bcc766ffd8b06f92a877be746751610972bad74059d45440502aab2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147328 Malicious code in resolvers-json-spectron-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786bd9bd9011a5a9ed2776957a9967d5e46fcb7499fc2695fcb8bc16f9045b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139460 Malicious code in antd-loglevel-triton-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1fd01320a90acbedaabde228264716f942b3ba95713dbc21b187caaa492d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148687 Malicious code in titan-nightmare-jabbah-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4b10e2d33cca2b4e42942e5d835ea80b43ca5a62a1ba61383c014dc812bc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145183 Malicious code in morgan-miranda-galaxy-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918e9f0a59a05864fd4d19ced3d18f6a0a259f723e66779962e8377f9f3738e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148840 Malicious code in typeorm-comet-carpo-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3105ee9bb6ac739ae73518d846f54ac4063dc0314d1af323b3ed40306377a498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148443 Malicious code in tailwindcss-helios-magellan-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbe3100900f2c9509fc6f154b180c84405648bb95b758aa7ea544adf22ad91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148038 Malicious code in soap-triton-solis-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba3f156863cf6b615e9dcb88b56c78a19251f706704d51a686d56438e079d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140280 Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a3d4d5f839eabf76c1685618852ca8f8e47c947a0394f2e9ae352f14632373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139728 Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144862 Malicious code in mensa-readable-nuxtjs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996539962812e89f55620996e24305e3dcbcd5363dcbbfa86f32540a8183ba45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149630 Malicious code in xanthus-lint-staged-blaze-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48371502ba6002b8a7801a52efdf30de71ca25226e57ffdc898f8c23115affe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140430 Malicious code in carpo-async-ganymede-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30455e0f409485a1dc7ed4659e0f3c508d3a48c6b811106230b3a148fbc8881d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-mdx-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f74c97d401a134f9b646a3669fbb031a73c2e27575285bfc7e10c686d79f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140648 Malicious code in chalk-lynx-alphard-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9b55d95bff3b01b820e5275231787b88a0bedba36e9439919568bbf7936231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-taurus-prettier-stylelint-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7c82516605ade34ff31a1afd6d028c24b9db892f1c0ea2e581b868bd8edc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141222 Malicious code in cosmos-yonder-bunyan-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44a36054344eedeee26f2b2a428f1fd1a1bc227d798ee651584d11ab93c76cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143362 Malicious code in html-webpack-plugin-ganymede-test-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce127dbafb7b36a903aab9a8dc35f72cf667d8a39356eb117ad682d276e7a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141957 Malicious code in elektra-zenobia-webdriver-mocha-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123acbb883945a9247d7d3d21ef8b7f1a1e3cd9362cb574c9125374cd3afeade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...