MAL-2025-140506 Malicious code in celeste-forever-bootstrap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2664a9a6197e54174e920e47bfe1732ec24d3916eb0c990bf54ccfbe187e4e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147896 Malicious code in server-element-ui-aldebaran-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe35319a0e1502f611d4adf34672070439f01d604657bca8167ebf2b2aefa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148923 Malicious code in umbra-metalsmith-hermes-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbd93e95ea1a4a643c5056c08bcede32284315366dcdf316f1b9da9df3b55c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145818 Malicious code in ophiuchus-halley-graphql-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1b6ad259a3d25e212a69ee17961f59715e73373856eb7ad9ab83ec13be609b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143720 Malicious code in iota-dotenv-parse-variables-envconfig-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b67d0947219d9c28f83df53a00911736d07bef071c3af1c08d8adc6e483569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146686 Malicious code in protractor-gridsome-levels-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da0a55e3c7d60b91f3bf11a33482c6cf3f299f5b9285ece091b50d6d1699e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140690 Malicious code in changelog-upgrade-native-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985c3ae2349fb80095178ca8c1c3d0e0171ce3f14382f0bb8265bbfd705918e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142727 Malicious code in fusion-callisto-parcel-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78094ec84b44c653fb466d59da99ced3eb3102b8ca8e13b0bef3f006f795826d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145033 Malicious code in miranda-firebase-non-blocking-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c957b2e89a78b2ed4ffc7627c5903a922bb5f6dd009837001276b57045e6a3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144043 Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145765 Malicious code in octans-concurrently-scripts-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f839841b4ac2990fd955ed429b446fcb392f955126d839c514c4c9c01d124e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139778 Malicious code in avior-ophiuchus-achernar-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8afd34c176b61d18d2d2a77dba4d88f6eb6df7acf0d470be7dc7463628e0a0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148007 Malicious code in slidev-janus-aquarius-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ba6f56b7df95c282b16909eb8377d5e194aa02b52d86685443a21590c3699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141799 Malicious code in draco-wasat-neptune-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3a50d36f059771d015ad833ded3b367018e0d184958b2768f1a46324dbd2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141624 Malicious code in development-kaus-axios-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f9e940d8b489a1c7d65f3dada82da97fdae00577eda2b6069959b4bd015d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146735 Malicious code in proxima-request-forever-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed41735893bd2e6c37f5d184b83eee13799a2223968480fb1576efc6310eaf8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139489 Malicious code in apex-yildun-iota-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b73ce43507c72532e06d369ad78ad66dcec3bac05ca084311645fb9741df428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143475 Malicious code in hyperion-grus-aether-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7fecdd0737209befcdd40ff14ff189edd26dc44c878a59f4d80c79df2e29a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-local-airbnb-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5f7cfaefcaf380f86b20f812c3d5e97113bcf8ff0e3126e8cde3c38f434c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-upgrade-npm-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e59d3349978c49eef4c99a61852603a8d0312ff6a182eba2bf50e696dd2af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...