MAL-2025-143150 Malicious code in halley-jovian-carpo-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1494de0aaf3324e5ed53cac6ef4a57cd2fc531bc8b1128185f6514d597d8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148737 Malicious code in tool-jabbah-promise-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdd084e411891ee742f45997c88fb459cdd920afd08dc815f3be0cc4c0424bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148294 Malicious code in stop-firebase-mira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5306560bd11421c1a58180bfdaa37dbeeac85378079eb898a03a023de9119b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144868 Malicious code in mensa-wezen-nightmare-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6bde94dfd734a0f6ff67d51fd20994512dbc36e0a61c47643f5568a4c4fdc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146351 Malicious code in polaris-juno-bulma-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6614053958bd86019a824abe36f10d3563eb1d08f8fbff5801ffab3ed2686a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144350 Malicious code in levels-canopus-webdriver-mocha-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb6f11dd61b299f12d5dc5c0f67274a2e4750a1798259d163f335b3fb0d698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143249 Malicious code in helmet-dactyl-flare-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bd1c045b58ad64b757331e6f73aabe93eb2e88d53c053b83f4c13383b3f05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142507 Malicious code in firebase-playwright-comet-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d883cae754a7de5adaf031e19a74cb9d8c2fa836bb6d9a02a43474cdfb3dcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146670 Malicious code in prompts-mocha-norma-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcafad7150ac059d1088731e36c7e059264a25f901b0fe893009c275bfadc86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144358 Malicious code in levels-npm-yaml-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa37b47332dae889eb886aef463cd255b9f8cdd61f08346e076667848f360354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140136 Malicious code in browserify-node-config-impulse-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1622a7c3fd318e8af35166278adb720713a472b9b5713ac048a0cfb2fcb2107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139460 Malicious code in antd-loglevel-triton-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1fd01320a90acbedaabde228264716f942b3ba95713dbc21b187caaa492d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144541 Malicious code in loop-zenith-chromedriver-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015455086584d741f34b2a1fd658c8c32248b4fc6c94dc2fcca14444c7b4c927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148797 Malicious code in transport-postgres-slidev-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d1df68b6c3a3deed16b7ba403f00479cb352e025b7e61894e351acaafe0136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148649 Malicious code in thuban-dotenv-safe-rigel-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccc363bda7653032d1ec59093033ea188b057325b09bef82a64b31336370d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145696 Malicious code in nuxtjs-aurora-bellatrix-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094ec9940902eb2dd3dd6b6b2332f3acd59cb9f6135a3fd2616bee12fb70677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143904 Malicious code in jekyll-fetch-lyra-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629b4fa570a0d70e8141464581ed15f4719b44b0916381a26d46e3b4a2b7a6c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146950 Malicious code in quasar-geckodriver-got-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f1df05da16c6960d3d2977c6fcabd9d256fd3297e8205bfca97b625c6a24f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148257 Malicious code in standard-promise-rigel-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9c0d0c1484d3987510685503adf6ec928ec165b2a22fa28c792c09a33310ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140074 Malicious code in bootes-deimos-tethys-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf8276b237457929553c4b5e28b51cc0edc14043dff26620640248f1d6fd96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...