MAL-2025-148783 Malicious code in transport-cypress-delphinus-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17eccad331b7bf36c8662f97af8938cf65348ccc3a67e2274b6676b36bda5205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-apollo-xanadu-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2454fb08bff143bdb22e629949a840c5de75841dc857d9fa4fe7a85ba4c4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-frontend-jasmine-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308e04cfe0933e6fc4337e749c10f0c0bd6ba52fd5827d1fbce22de7792638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-prompts-meteor-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dab93fab7c2840eeb9d78277dc25dc871270bad87bf27cccf35509e1ccf9628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-writable-janus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a03beb7277e4b3b297e1a2b11c8eb02fbbc5b1606315c05b1cc5cd81a5cf83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-eslint-callisto-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03565cf035b694081bdb901d1a0031e7f748cf875b1c80f18cdad66698f38aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-janus-solis-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed9fb31c30ca5d5d897eff38497628d504dc12949cc78ef5f059a5a10c1355d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148651 Malicious code in thuban-ganymede-sirius-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e9ae9e62a1196b1a4ae777bc6ae0a4cd8e3f48f279f852f8802edfd651784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140436 Malicious code in carpo-cors-react-bootstrap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d871110fa02601bd5617e3520de63bfc553c86eda11a0f3a7140b61843da2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148101 Malicious code in spawn-lynx-phenomic-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ae23c6d32d600455a747d54659c1bd327ff6c5d32b9722c11f6e3dddde3461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145113 Malicious code in module-polaris-dactyl-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a72463d4d1200e3476f7c45575a7a197213739bf5954a2109210a8d2d91f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146011 Malicious code in pavo-supervisor-cors-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09634c7b521e145575c5a46514ec820c83b1564003fa688b91a1cbaf98120915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147260 Malicious code in repository-commitlint-config-angular-fetch-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02b4b6a63c278ba031ef0f782682f26c1ad3881ed1ae82f7aed8dd2ad04e399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142363 Malicious code in exec-winston-loop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43316f5983d8aca28f6e31863054b8c78639303e35a1e92460a364c3a9d917ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145628 Malicious code in non-blocking-tailwindcss-virgo-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9edb149950bc1f8e57d253ad39963008d2ce31b5502a98f0012b06b0e1b765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142291 Malicious code in europa-scripts-betelgeuse-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8758ee005ea30461f9a67d19287676d1bd1758295212a07c48fde2f07926de95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147349 Malicious code in rest-grunt-gatsby-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65af85a9b14891de6552ebba028cff66951e27bfb7ad69e55bbbb050e2926389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145493 Malicious code in nightwatch-ursa-centaurus-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19b305f14370fe36dcec295ccbe9b4d060fc0c026b5114107f721facbbccc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142135 Malicious code in equinox-selenium-sagitta-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca37b453e659d859d2a4912c5d5f173edfd52f43fecb65ce41a309428b30a762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-build-chariklo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e69d006846d8007ebe2b881da6d8832c002a8bcc2fcdc0a56be2d7c4dc362a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...