MAL-2025-148810 Malicious code in triton-child-process-apollo-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7230a9819a5814ffb0edd2c058b371e41236a009c9ac7bd611208675e7ae4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141981 Malicious code in element-ui-radiant-procyon-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424d9e1f0ff447b5f9d760005a5ce6aa0408f107310e362b55641a9b2accf627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139474 Malicious code in apex-castor-gridsome-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9838df6fb8cb5dd397939668d3b47a828bd69186f05c69811ecc477154c170da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144118 Malicious code in karma-quasar-io-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fba8e53336890c2a909220698dc02d13850830f1b1fd4621a31308f933e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143953 Malicious code in jovian-mocha-ignite-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6831fd7e73db6ab318dda20722139bff9649596d92e387563b666f0778dce4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143975 Malicious code in json-impulse-websockets-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b4f7f43fc008c37e24812ac645b40a06a9a8604e0b3976e987f99ab9d28778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148201 Malicious code in spinner-lint-oberon-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb5f10b98c034f321b49c07fc5d61801eac50c647785c8f2ff987b77cfc76f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140150 Malicious code in buffer-achernar-winston-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a565a391c2111e7bfc57ebe2f777db3411010b05f0da531578022935b325ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144538 Malicious code in loop-xenos-config-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572238a84327d4cc87f954bf26a61102ae7406d29afd2f45bea34c346d2ecdb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147790 Malicious code in sedna-regulus-iota-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b8ec49fe6c4fab613bdf976a420affd1bf19ba986d1757efa996391dabf75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139306 Malicious code in algol-rate-limiter-capella-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ead611eea8dec086e85c8c2f15efacb826f87c089032789ebccf4bace81d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147888 Malicious code in server-acamar-izar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03a7fdab3a572c9f4cca3c5140cce027ed69ed81f12cd697baef6fb41f96591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139763 Malicious code in avior-commitlint-config-angular-cypress-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27fabc8b6619c335527c49d2b8fcb85fddd7995173052888ec6ff565c9fedff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147031 Malicious code in rate-limiter-bulma-enif-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c05e37b38ab2854388dd18b3d5cb644094e7e0178fa0c761fdc638d8050b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143910 Malicious code in jekyll-nodemon-lint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eed5e8ff22cc9239cffa973753ab2ed9b0ef01e31a43a734b87a8a922d04e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148817 Malicious code in triton-ganymede-janus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d84855f4774d7e9b77b3a1750e1d3b87f1210412e2f75f70e5024ae188d902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143418 Malicious code in husky-ganymede-pm2-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ae165c50206a4c6c2d4bfbf0d57465a55bd17853661b93f751e03903ea096b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146146 Malicious code in phoebe-chai-markdownlint-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1912e8ee1140a45b455b6973df956f743b61af73151d2720f7ae6a4411afe89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139658 Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143760 Malicious code in izar-meteor-nightwatch-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d258d1a74582347b0d7071902b081a7b884336ddb8de8ea8700151566361f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...