MAL-2025-143926 Malicious code in jest-hermes-configstore-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55cfe725d260f2ff8e857501ff3c86c3d6102de8a1412fb9208bb9189e66ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140635 Malicious code in chalk-draco-wezen-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b6b4cf0c27e8f1ed145b096b6bda80b9337b30903760551a33b4c905bb8224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143952 Malicious code in jovian-mira-blaze-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7a31a0701b775544671d1d8f873a6e0cfd3eac66a6004ec3924bbdd70f5eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149722 Malicious code in xerxes-testcafe-sqlite-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e45bdaf5ea929a3a996d1e89e1f31880f504fe467aa313d14ea669a2d3d985a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139416 Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147689 Malicious code in schema-corvus-bunyan-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5e35c4ae9f8c181512f92e13b544405cdeba2a3e82a7feec814e7daa456142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145156 Malicious code in mongoose-jovian-perseus-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8b0a923dfb3778323f2aa7e9a296eca4f85eaa61df4e5575c5a388aa02f07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143522 Malicious code in ignite-pm2-postcss-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8095a9cb35cc211097688e59741a37304773dc1f5130ed8ae6a8a9f8eddfcb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148240 Malicious code in sqlite-spawn-ultra-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be06e9b3e8c2658261f00ccc757cc103e2be3f4c5ae7c655f5dd153755439ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142727 Malicious code in fusion-callisto-parcel-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78094ec84b44c653fb466d59da99ced3eb3102b8ca8e13b0bef3f006f795826d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142292 Malicious code in europa-sirius-graphql-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce6971d451ff8d1c3fc0af0584771bfdb33116e859b78003c35c64a5b7404fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144891 Malicious code in metalsmith-ultra-ceres-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776689ae45d74b271ed19b9bff9e67824bd653c6eb8a6ffe860fe7b8fa4dbc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142188 Malicious code in eslint-carina-forever-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f91ef5dc4c00f9832c98df57115357c304787af3987b4df8eb1f049d795218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147952 Malicious code in sirius-foundation-sagitta-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3ab63604cb13b980d2d70c5b2c199f034d114cdcf1aa758bbe94394b8f2ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149234 Malicious code in vulcan-fork-colors-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902b014ef02bf4a89bd5777fe120aaf8ffb901c0b2721470f49bba8874914733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143188 Malicious code in hapi-lyra-europa-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f82c330c425d4821d5ebf44a02c1d02a32ed95f93e53592b907f5104a831de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149675 Malicious code in xenos-fetch-gulp-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c4da9cb7d36cded05d8c1bade5ffe9c7b233c9b1c4b31e046664104ba0b11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149152 Malicious code in virgo-child-process-flare-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65c77657c11836813d96b9f15522a940c3e8048fe28f0a62bc4f01fc7793e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139268 Malicious code in aldebaran-bootstrap-mensa-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009c71f1315940d59a9b82670ee814e68fd91ab6279feadee976b4cc23c5e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...