MAL-2025-142078 Malicious code in envconfig-magellan-magellan-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b780c70358071a961c42362e095ee5b272314df1a7a99c400575946abdf7772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142049 Malicious code in enif-fusion-chariklo-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99b8a29edbf68f38fa93c36114a7188b726f9e453a14c9ec6da28db44f7f94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147243 Malicious code in remark-castor-ophiuchus-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9974665bae787c95a53b225627dbad7b63f5036dde9ea0330b70f1b73b5aa9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141364 Malicious code in cygnus-cache-magellan-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146852 Malicious code in puppeteer-equinox-polaris-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f13932f9a8e3539f087bc416ba6f2dba7f3d6ed4e3551db43cf729c76f2caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144915 Malicious code in meteor-iota-ophiuchus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b0ff1cdf2157479d762189676161efb8616723cf3c47dcda0abc29af08734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145722 Malicious code in oauth-bellatrix-chalk-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffad45b9b9432e62d0de16da747be275e74f7ff81edc924f259c69ac8464b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140242 Malicious code in bunyan-gridsome-init-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e117de56da81c5c34a98930ad169862d0bb5f3bee646ae6e54accefaaf814f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148102 Malicious code in spawn-mensa-nestjs-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4b5e325e2cfac082460dc57cfc4b2006f296c9dd1b3b9c7ab233de8f93398a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147979 Malicious code in sirius-standard-mensa-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f9a6f0c3f9b13e89a3dc3ede03cf3da159585fe7b70397f5ffe65a67f99d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148674 Malicious code in titan-chai-heka-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e8f2fed5c2b90a4dc02ed95b7779ca58c2be25e2092df0e018b44bce9f349b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147923 Malicious code in shelljs-nightmare-perseus-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddeb1bc1a009697c0a34a92327586e0fafa7ac89a758b39af0e3d7cfccb123b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148133 Malicious code in spectron-webdriver-init-wasat-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8431aae3cf4bfc929aa82d1fa1c88264a12e7a751e455259a574cc0e9a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139619 Malicious code in astro-vortex-commitlint-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832fab4734976965417e4c3c3987afcc42a99c3cf032927a927552d6606651c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143382 Malicious code in hugo-chariklo-oauth-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fd7d1fd0275b32a4d80f5e3b726a6742963052cd0743ae6a7dc530322ef608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147618 Malicious code in sagitta-sirius-express-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087754848ecd4b5049a7ae0f8fba20fb2b743ebb27991b80416ff6cea727a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149154 Malicious code in virgo-farout-cygnus-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f515381d2ed9b5123eae6a36d19639f2221e8136e2dc3aaa2fd13e12ead6baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139837 Malicious code in axios-protractor-loglevel-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d16a7033d42bdb4fbfafe22f856e5fb27e0364dea6cc4a01772b651a18961d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148413 Malicious code in sync-adonis-rate-limiter-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5dc33b4b091bc26ce6cac112f885cbde0319831f4fd7aebc4e645088bf967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143183 Malicious code in hapi-hyperion-corvus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f90757f777313f495bbab629a08d287877e9996063f135538f6c4a9ca5cf61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...