MAL-2025-139279 Malicious code in aldebaran-grunt-cross-env-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942dc7567872d64db37f4d53372787e9b8e5a11a4ea0f476f650bc9815625904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148043 Malicious code in socketio-acamar-pino-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f52eb5feb86456ab516fbdf3dda48667262ff5ea6e7f05e4fa7fb2ecace47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144073 Malicious code in jwt-foundation-kronos-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02bbc3d31e8bcc41e33fd6c91d9aaece87fd4ad899100435d7e8ac475172ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140744 Malicious code in child-process-dotenv-antares-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ea11fe46221f15331cfdabd1b0fb5b2e15fdedf8e103e2aa4f98cd6ed4e4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141057 Malicious code in configstore-magellan-express-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e92b71ad3863c6962c41ef8724e17f7af4f5f9dc8250941e83cc597c9e9496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-castor-nightwatch-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b82800c207357c47644279b2c470bfe39a94a201027e0cd5e7aeb4ec123eb50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-sync-enif-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e3a83c0ebc9b62ac07880fd2b7ee24acf354995ffbb017c950d19e49d7f208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-atlas-levels-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fb6bc778d4b295bde9df5c3d51a08e2baba693ed694c8fc7eefd6b5812f805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-rimraf-auth0-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308cc6969d5c0fd9d5fb4f300fda62ca7b42b335cd50278fad17ece90c2621cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-node-sass-hermes-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b4cb8743405da734d4d184d2310cc39dc588330460456eb82aad066ff03c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-atlas-cordelia-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe4c8839f981728634c7a122a4d6dd3c0fa6ec46fa24d71e759a5a59c609f888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146345 Malicious code in polaris-grunt-nightwatch-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905ca459a3f52802a6a52f4225effde979ef4a34429d2f47835fde85119d898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148156 Malicious code in spica-cli-heka-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1283db4e16fe1d6642d68aea1d2f64f45a839f4b78e6f65fe2da51ee9ec9f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149770 Malicious code in yakutsk-html-webpack-plugin-koa-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0318917796ae63cd084347e53a572874ffb930573ff36461e8af28c5b169c5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142642 Malicious code in fornax-octans-grunt-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b602d370f1083a15d9a1ec3d3af5636eadc38249b8279136e2dfa493a1c039a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142043 Malicious code in enceladus-yaml-thuban-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46781eef16c099e80d02af004a2d27414141e970c47df84b2291f9f5e131859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143724 Malicious code in iota-fetch-cressida-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c4f0e250d0f01e37aa7792b1b4a8643a196c2c813a8e3e6686f406cf1d3ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141104 Malicious code in cordelia-mutation-halley-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7711195b3c63d943bd5827b86446fa04c99591895125bf07633ab35cb31fb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142111 Malicious code in epimetheus-triton-lacerta-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c84f81d63b2a3391cebfaf4fdbf55f15d5cb41615b2987e447e4980502d4c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140056 Malicious code in blitz-pm2-mutation-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9947d7d777aa5109d31e05196cc3ee49ee24d523164a0c11029270bcfcfb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...