MAL-2025-146500 Malicious code in prettier-polaris-avior-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3192b3b22373e63e2493a019959c33075e6492d8e743c885cf39b43bda1abca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144065 Malicious code in jupiter-tailwindcss-unuk-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6604a27476f8c7705bc350f742b566022ef6f23c269b2a748a8f7204e54f0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141490 Malicious code in deimos-comet-ganymede-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef3a69785ee560c1abd0a6e38107477d33b1462d52e8de5ad903da881e50f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-element-ui-aldebaran-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe35319a0e1502f611d4adf34672070439f01d604657bca8167ebf2b2aefa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-vuepress-socketio-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af27987550325036154caf57f1fc9d78ada800fca1583cb0f744df1f9a6f2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-nebula-thuban-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239bbfa137240720c0a6c5a6048a8a7c5516f8059e9b72fa2761175dd1bea32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-writable-nova-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290e7f70c796def7185fa4a8d664bd0af8daa14ffdcd7d1cb949db022ff374f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-norma-algol-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ad09764898dc0af2247a64191afb7bbd40d6247e262240655bde8603b8a716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-scorpius-sequelize-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea2aa069bf8eedb6eee4b3b812bf90bb024a8bc119bae0e51eee5a595451c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-pm2-magellan-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f979d60e9f0321430741732ee1d0db5bcbeb4f5bea123aecf96de18fd502645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141494 Malicious code in deimos-gravity-cache-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622702e688f2fb8e40276dc4b844a58c5ad13b3b4ca30106511cad457fa7130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139842 Malicious code in axios-virgo-registry-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15200d0c006ec0dca8523bfb533339e3be63eff22858e13a97047e073a292e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146072 Malicious code in perseus-cassini-pm2-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eecf795ed972026476c3d217f8d763e7e2c89ff111b2dcd751985e8ac5aef90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148138 Malicious code in spectron-webdriver-restart-cluster-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c417cff21456035f8c3ced2baa3c4dadbdc2048dfdb5510a34bfe0d3ee045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146882 Malicious code in pyxis-leda-iota-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c470968dc0f4f1b5769ff5b48425093b4c2b56337f679c2a11b9757d72f10f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147107 Malicious code in redis-juno-restart-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1529634c79d2d596ca99ca60a3e80f312665dec3ca32c4a8f9cc1e4968848b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145667 Malicious code in nova-sirius-warp-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649a56723a38e2cef5365a388126358f1afb950907d8f5b300fd20403cdb11ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140722 Malicious code in charon-inquirer-bellatrix-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45ddb73e1ae89fa61983ff99b6536cb6dd6cf474fb310c407b8cad8b5533fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141877 Malicious code in elara-hermes-element-ui-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28265b9fdb68bcedd5c210e9a0e16a40251eadf6018250aea47df9be29877f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...