MAL-2025-142271 Malicious code in europa-impulse-chariklo-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03c6cc4cc19364598b7fee08473fa7953fe3deed86359c01901586f8f86e716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148048 Malicious code in socketio-dotenv-parse-variables-phoenix-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f285ae0108295516b5c1f0e41ffc8b87b87b1514787688973dc22937e53471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145966 Malicious code in parcel-mui-event-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3a8fdcd7a231752e40c7d558b2efeafc603d9ec4bee1ff23f8c5ec2d88e5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140132 Malicious code in browserify-meteor-exec-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7097b25471597433a406c160c80c2b71d0f76c3ef49421322f2d34b31c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143572 Malicious code in indus-passport-oauth-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0379683791185467ad7509ea141414868c93f65970bda8b65d73eee3b931f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139863 Malicious code in babel-iota-command-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4053b964c04b56158ec8a42e3d4cdfcdd483167161fd27455c1a449b7b31160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-lynx-ursa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef6b9e2958f19ca89796a67d8034d818d1ed8d5a1a1807f5eaa07c7468a92e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-antares-winston-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a3dca5f522df8df4f00f4e31f73729b960f978a60aa0218109471f65e38f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-react-bootstrap-javascript-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e1744c55940a789327d9b33cc8d592c73c78aba0180a6c3d6f4db1c9a6d740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-arcturus-dotenv-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca87b0bfb0cd17d178e3cecbda0ef3048fd1066fb524f365964e3f00cb0dbdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-unuk-indus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefc777df30f65493f2c63a279abb6952249875a9d4a6558de667af648f650c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146502 Malicious code in prettier-rollup-plugin-astro-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfded479fe2ba4f61803733a27544ca78184e1d770ddb07750a38a7985c66b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145739 Malicious code in oauth-zenith-pino-pretty-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88e0eb585e086945dfbf2008b4da72a58c538e8c2d3c8381af73c3b25181029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143199 Malicious code in hapi-winston-halley-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144639 Malicious code in magellan-gravity-rehype-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07de925dee10238a4852a1837422b54d8a5857069876a5f9a55053132923bd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147980 Malicious code in sirius-taurus-achernar-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50c4cc6027074757c03a706abdd29d05f5adc28296556b0a8cff59c1b16c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-betelgeuse-barnard-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8988181ea5ddba4cc11196940fce771f29fbba5281f1d6fb5f88fe70f35418d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fbe1c2b2cde5513e863fa8fc192ed8bd1e1098a5964c8016c02142c5a7d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-passport-farout-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42df2a17816922455d422894949135bc0c3aed262172e07ececd4836aa13cb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...