MAL-2025-143815 Malicious code in janus-lynx-nebula-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c58283b03b07b8dc5e0e6a679d5e9ea4d0b397a111371b7e52f2647e692d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144326 Malicious code in less-loader-pino-dotenv-safe-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af76f40a9ef37626c42f5c3ea2f4de40317e8fd209c2822c63c0123bdf79ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144374 Malicious code in library-eleventy-start-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef5c3375e9382697062795f0b29e5fe5a516d4292590c3003a1e2eef900faa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148462 Malicious code in taurus-castor-alphard-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae94e2a9377380ef9720cb8a9629ded2f7adf3290f1e4f280445c25def67d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144118 Malicious code in karma-quasar-io-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fba8e53336890c2a909220698dc02d13850830f1b1fd4621a31308f933e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149426 Malicious code in websockets-run-script-websockets-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0a70a318c20af9d9bb70ed07c0a0083fc5f959e1a8d806ab7edef580115498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146751 Malicious code in proxima-xerxes-await-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5410adaf1035021a86a15b259d7ce60dc0365d4b361a661abd6d2fcce409b986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146770 Malicious code in public-supervisor-semantic-release-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca5cb99f5d1988c28b92f7426f9594a34d30f68949c8950719d17e65f59c3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-socketio-juno-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d6764d25deebfa43d5328d1f3bf9f5622e17aa5105592f702aefadab7aa8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-xml-chariklo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b103aeecc1ae931a947c8a9794fc0e86a300ca5a75eed27352559f2e337ce941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-loop-corvus-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d56eafd05e6c679c487885f25fbaf0ce07c2a85970d27f3e50365e0dc846a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-csrf-slides-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-luna-socketio-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ee266d139f89aff6fffba83237a702f6d2665de63832d7becb99225fceef2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-dynamo-react-bootstrap-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de049a6db6a95c67a2bc0734868704264651f3b278204b15e772e2e7561182d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-transport-postcss-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bac55347ceb36577a07a4834c7dcd105c32d8cea87d44e81f91cec75910cdb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-request-farout-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be11fe39d7e45a17cb779900738bebd70482b33fa87aa5fcb66d39669a64763b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-test-aldebaran-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd65b09e2dfd2d56ad92e4c1a5d50764cf38a8b0a0eb684846bfddd61e7e2ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-yakutsk-xenon-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed36fd92e0443fd9e17ba71160b7289dafc15159ca4cd894ae408cf92e488f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-oauth-dagda-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a71ca9cf122bb124c897b6679bb61b645e6812b59362397a8c70fe9fb150c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...