MAL-2025-147207 Malicious code in relay-odin-weywot-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b4df48953dc2f23983a8d7104c685d514b8f20ac0b05869dc00d155d023555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141997 Malicious code in eleventy-epimetheus-rate-limiter-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad9c1494c426eb22260ef16a91168d268cb9fd31c3e614a913bf3df717b7dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144783 Malicious code in mdx-vortex-node-sass-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c094899bbd95d818089b04e2d7c0142a8b8c41ff80d812a232392252e31bf0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146288 Malicious code in playwright-wasat-sagitta-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6025a9c4a34d28d5fef4bf33d34d36f5441114184959e734cd7837e43332f066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-react-bootstrap-meissa-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf93686ac0c5d7e54ffaed0b8ea0486e846b54a3e4cf06bca794c4275d878695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141435 Malicious code in cz-conventional-changelog-supervisor-loglevel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fc46ade320c9f26fbb269899c5d6682e7f1674db418e2938c9fbe50833c033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144192 Malicious code in koa-electron-reveal-md-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bc2848e7e40366ae4424bcf5d0323c1a8284f8c81db4e7d58b36a05f3f2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149105 Malicious code in venus-centaurus-meteor-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e2a7081640c6d00cd3721b0816361c409eb82efad2b5cdab73e585d1ee971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141042 Malicious code in config-umbriel-tailwindcss-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b504ad2784be5eabf4f348d8bacc2bca3fca7f160530f9e1132f55d1142e1d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148702 Malicious code in toml-chalk-restart-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7520b306eae00850d2361ae42043475f5d647e1b78a8d0d15efd2b81199c3117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139245 Malicious code in aether-vulcan-nightwatch-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81184e70ff47e3120c3a33be222f6fd072ba6b272cbaa3a37f782fa9b7107289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147029 Malicious code in rate-limiter-ariel-slides-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ebce7dd4a32781d94b11798bea39890801057ff66aa44dfcd434474655649d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144970 Malicious code in mini-css-extract-plugin-capella-lacerta-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b5bc74934a8bac1cf36c483b27d6fbdb0ad09d79f4471cbac2695209ecf5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146604 Malicious code in procyon-materialize-non-blocking-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bc6c2ca4e1c5683d6cd7b60e5b027a62c82412bb256bc38dc1ef4c888bad6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149600 Malicious code in xanadu-loopback-enif-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b262f3dda7c4c884473fc437198ad7e57eb99f347ca9809993ad238590768e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149312 Malicious code in webdriver-manager-chariklo-aether-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565f76f2b1e7bfaeedc6b3a660334f8e11e8a8b25d0bc5006c3522ef35a227a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148913 Malicious code in ultra-update-nightwatch-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9323a99754cd04354a83c82848390cded79ecc02a51783a2d49ac18dd9d191a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139962 Malicious code in bellatrix-yildun-lint-staged-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcff6df8f297e1827092f1b72e1b0b0fc2247b2491be6414d2fb5a500a1639dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145280 Malicious code in nashira-mui-server-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1cbab30830c258d4279b46b8e5d3cde0723f00724a5e0e18c073551ed2ec03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139675 Malicious code in auriga-dotenv-draco-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9b2da508ce5e3cd0f2e4e939e92d8107d8b398972b460a825cdeabd47542ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...