MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148220 Malicious code in sqlite-ariel-spawn-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345720f3836c37e579e5b4f65b8f3644211d05a83b66beeb0d435273f944b5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148443 Malicious code in tailwindcss-helios-magellan-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbe3100900f2c9509fc6f154b180c84405648bb95b758aa7ea544adf22ad91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145983 Malicious code in passport-leda-spectron-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f602944b892aa1b431311a550c2bdfafa04a4576371a9039de3d80d1165b73af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146070 Malicious code in perseus-blaze-pegasus-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67accb2c721894c9cc3ddef7520ceaba03aee1c6a0dd89bb3715b8912e8f2601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139924 Malicious code in bellatrix-astro-sedna-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e877580ed0a2f032f1ffa5c39273db2878f9aa5883de2cd9220fa632d0f1307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147608 Malicious code in sagitta-perseus-figures-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452e605a18f208fe46fa3e4d4992aebe5353745e31e801be95b70bd416fe8ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140743 Malicious code in child-process-altair-convict-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628f999ab3623b51c84e48ddb51601ead8351a062964980febe613b812ec3a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143613 Malicious code in init-antares-deneb-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf06fd9688c77aeaeb15ff5608ce4a1fee14ee26aa826fd990a8f62ba09ced6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149065 Malicious code in ursa-oberon-antares-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5bc84bc4c1d6cc887b8ad39364182e98b520f3696b8bca8c88a8fd6773b484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143481 Malicious code in hyperion-janus-mutation-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba7b7eb0f6c687a9bcde5c0c532b5d9698dc27484469216a559c9bcc183edd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146090 Malicious code in perseus-jupiter-got-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c953cd749ca2baddd8a485ccd923306d0e09b1eb89a98f5aeb1aa424be888e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143689 Malicious code in install-uninstall-eridanus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a783a109f2ecd48aebe6cfed3f14cd877e84d3a42b39daae06e048a0c8599f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147892 Malicious code in server-command-lyra-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599182e18ffd8a86cfa7e3f6b6279704d15e1d14f57cc865232a8d1b6d06cbe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141769 Malicious code in dotenv-safe-pino-pretty-weywot-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0660d191b8889bfff42b4b24d6a2b80d53d8a238e8d3863edf6dfcf5780199a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147651 Malicious code in sails-lint-staged-dotenv-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d0ed88c7eafaccd1ec5e1fed2549646dc207292a5716bd4039240387a944f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145741 Malicious code in oberon-apex-react-bootstrap-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1970fde9afcf4aed637d9a4801d60378c96b21ba6bd3eaa788e07cea42a98164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140283 Malicious code in cache-semantic-release-uninstall-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9671bd2f3945f38791b47b7050c3c40a72bdf1f1d31cced49bd57b82fc1f5119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149418 Malicious code in websockets-cluster-puppeteer-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ceaad475d9d955f6b6f6dbade90cab89f4baf78f94279c6647fce157b11494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...