MAL-2025-148221 Malicious code in sqlite-atlas-dynamo-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14187cef271cc4426484306893a6fee37db7948f0787533e5623a7551d59d9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140059 Malicious code in blitz-regulus-phoebe-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c368bd40559bad0ddf703829fa576b4ca7c291b37720efd08a9211e177fc52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141962 Malicious code in element-ui-ceres-aquarius-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54814dfe23a781cb3e4bd646a7076f4328a131fa2f85effb56c7c81ba91163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146468 Malicious code in prettier-fornax-exec-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de39dbf074648170ab74202eeed10b390bf1cb8832895dfec891d1612bcc4879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142036 Malicious code in enceladus-rocket-centaurus-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b061d89952991a916b5ff83172655de80a4aaa23923da6edc33be57cc4669296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144336 Malicious code in less-loader-update-spica-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458ef2dc19a186f786aa9fbde9fb2071ebebce6bc29caa9bd74cf4543b1799d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142674 Malicious code in foundation-taurus-perseus-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0907b66f0151197653b0523e5564987d59fd908666612ab7cc3ec0f9f8f32344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142780 Malicious code in gacrux-publish-tailwindcss-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d37f5a3c4214caccf7c82701f651d7efb773236d74e1fff5946573dbc65889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149505 Malicious code in winston-link-sedna-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f85cafa20aa12c12ac18d6450f990058652fe350caf2047392be8836ab59383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147767 Malicious code in sedna-hermes-ganymede-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b092a36f13d241a703de82e90b7acc99630eb6c70b196aacce0df4739d6c05b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141606 Malicious code in despina-publish-dynamo-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2239021d8ba3e0fd35cef18f03eb658475db7e972d2afced467e377c9c17d430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149773 Malicious code in yakutsk-kastra-webpack-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da31a94dea166f9732544d8bc74d15fb23b8b8d49f3dcd8465de86a7b8ba7022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142818 Malicious code in ganymede-regulus-nova-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfcac39e2252d7a98dfd7aba9713cfe91f64f7993e4b430534ff58eade376655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146665 Malicious code in prompts-jekyll-vortex-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44add37c584676603eebcdad6641eb3d7bc89aed3f796216a360a469f27af9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148310 Malicious code in stream-babel-procyon-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17805e8f68002c08e621511e03babfa0960b074faf4f74330f9002843505179a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145884 Malicious code in ora-halley-equinox-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e17eefaa0049e9ad89efa16d16def14a0dcafe1a3cb50d8e977ad7885dd1feb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147927 Malicious code in shelljs-sagitta-forever-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520a636888d2b5c6bf4dc6d1cfb48b131a6cb2490a7d3d5ada301ab554f0e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142885 Malicious code in geckodriver-titan-weywot-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edaed3bc26a79eac172ab1ba313845fb14e0cbaf5284b4847aa3eb43b3d53c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142984 Malicious code in got-release-it-nodemon-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2424016c8ee5e47eacbc475dc2f28d025a81a82cbae0be1a60689f3d65c1ba49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147995 Malicious code in slides-semantic-release-auth-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451ce0fa860104f930018e5a6709dc067620d54129684d5bb8677aa14fe5a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...