MAL-2025-142854 Malicious code in gatsby-vulcan-lacerta-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee152af5e0dcc5068bfc21b3ba72197064d1a82c2e97851c04f94b589799f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148647 Malicious code in thuban-development-carpo-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aed78094c857d95113ee1ba03e8faeb5c7cc1748b610acad1eb180397ae48d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142950 Malicious code in global-tethys-nextjs-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f8b46fa41816c24f285bf776951b6df137bb968ad99be9a19ab9abd22c3841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140406 Malicious code in carina-chalk-init-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef8c8bd4b48ecba82f3b9e360f783e207ace38237e1a23d6f3a7637878b685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139896 Malicious code in backend-ursa-achernar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28154fb6cf14fc46227c7074418385889b26097c09010124f744fee0a02f2dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146313 Malicious code in pm2-sqlite-got-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538eb2a77f07a4d82c2dc92a67f5740e341cb37992ad8e0cac69335ae315904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148810 Malicious code in triton-child-process-apollo-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7230a9819a5814ffb0edd2c058b371e41236a009c9ac7bd611208675e7ae4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144973 Malicious code in mini-css-extract-plugin-cygnus-centauri-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d35351e2e3b1eaf852726b159ebfe9175b18a5dc8d25b9ed730e6f7b27a8103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144500 Malicious code in local-solis-spinner-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82bf7343369abc38fbdbadc5bb280fe5fe54bceb4c8dcb596a4f850e3392814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145199 Malicious code in mui-cypress-blitz-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991e983f3904a6d0ef9d7df604599d90c9d1225c9f60e4d425316250f0264ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146094 Malicious code in perseus-less-loader-uninstall-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0acd2d52c31594304a5cb4d7f1f978a7ccb708ecc08f763b3b072edd8a37b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140341 Malicious code in callisto-loglevel-electron-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db4a957b6d9ec52cad85ef2144c73b018c6121df283ccd8fad94540c5c1f919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146584 Malicious code in procyon-commitlint-resolvers-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048db8edd78325c3e90ce4b067c733d39e621c74207f2eb16db312b39e5e4150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145223 Malicious code in mutation-gacrux-axios-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2cb2e0a07e4cb03c277e22d854f9cbc3681de5b051d9d9a3b838494c646a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139474 Malicious code in apex-castor-gridsome-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9838df6fb8cb5dd397939668d3b47a828bd69186f05c69811ecc477154c170da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142280 Malicious code in europa-mira-winston-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c23a78a815cdcdc0f318e8ec01bf642638a7543a0d29202b96f07209df1b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149636 Malicious code in xanthus-restart-publish-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e458b053e98b36d56fb1199fdeb1076d014dc681e78a7f0a8b13bf328589204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145866 Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fbe1c2b2cde5513e863fa8fc192ed8bd1e1098a5964c8016c02142c5a7d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142481 Malicious code in figures-scorpius-gravity-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e254e05123db98929538092e918e04c4e597fa8cc159bb076609d7276a8c7fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143784 Malicious code in jabbah-node-sass-neptune-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e81b18803284efbb1d7493c9733c7ea8fb01527a0f6beca5143224cb3996ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...