MAL-2025-140425 Malicious code in carina-rocket-shelljs-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca87fececdbfe1c01f7b543ecf0508dc2cdcadff80d76f5c99691cfd4d27abfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140897 Malicious code in command-babel-sadr-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa032edc1a5d099b047f36cd37cee3322cf3a48b526476330b1342d8f41039db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145365 Malicious code in neptune-kaus-xanthus-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fed4bc4106be635c7d21bb98b4b77053a3e5766f1ebd1ecbddac9415f6f11f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142304 Malicious code in event-atlas-spica-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067b8b530c373832061d5f175a4d881584493dd9a7b8a77b32796735fc9af307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142794 Malicious code in galaxy-semantic-release-auriga-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d3fed4f83d961b8702a5d20149d2721e2318a9e39ae8feaa081ad159467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139477 Malicious code in apex-frontend-bootstrap-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b33ef97cc7198d0ccc014aa6a18a7cb7f156edffa6ce990a9bc80488bf5e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144594 Malicious code in lynx-iota-cz-conventional-changelog-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1652856c44e9fe7376fb9868f2b409d579a3e47c2aec587f52af141990bc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145679 Malicious code in npm-helios-nuxtjs-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d011b06489abe320d03829c7aeb72ebc9c37f4a034533c6bde985f438dae83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146233 Malicious code in pino-pretty-gemini-blaze-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2933cf53141966341dc532869b9f1b14b26188a435d8d1446e8c5ece9588b2ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149524 Malicious code in winston-reveal-md-betelgeuse-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5353a675fc71a6f7979ed34bb601e42339f6f0c11956bee5628b60cfcb84881f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148049 Malicious code in socketio-draco-blitz-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141888 Malicious code in elara-rocket-pipe-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ff2f73a968804fa97093b76b356f86a3c51d62f7c7b520c02d5fd837aa8eff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148831 Malicious code in triton-webdriver-mocha-hercules-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c377541408e4dd2d0d9420417ccf43e9296fce7cdfd3020e459e556e4478417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141107 Malicious code in cordelia-orbit-mutation-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb77b4f5020bf528599076b81da1ee661198332014ff21e93cf63b02328c53bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged-tomato-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7c3df03d5d11071ece7f3d6a02d6d287db936e19a518d6b13433fcfd3df1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138901 Malicious code in nursing-amaranth-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503f9be6089338f89c0efa27e1dec4c55bbdbff9f241c775be7e311d99e84a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy-olive-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fe395414a455d1f5ee1d3f47b24fc95e181fa1989275b8438058bb45a61f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous-beige-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c394683c3a56d492dc7a409254c3ae7d7f5000509e733976b71cdb97b8dce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-beige-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4ed90522d6b1861df6a619715ef2cd213638a2fd3371105429e7af170f81fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139086 Malicious code in unchanged-tomato-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7c3df03d5d11071ece7f3d6a02d6d287db936e19a518d6b13433fcfd3df1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...