MAL-2025-146890 Malicious code in pyxis-terser-dactyl-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881621ec4d7106ed416450651d6195f7979fb834bddef57c7ba0760f7650fed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143130 Malicious code in halley-auth-vega-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e198bf855eb0b039d2d08b024a85c30d227cbd2fc6698801a6f92c2a987080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144743 Malicious code in materialize-fork-redis-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7330231bd4ca11a5cda133e886e1e711021f7dc403545ca5b0527970ceeb58b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139989 Malicious code in betelgeuse-middleware-bellatrix-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558a753c5ec00d54999a3046a59f0048b6658f9f6baeda1a054887a37d664257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144826 Malicious code in meissa-pm2-middleware-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545972211a2bc326cdd56d631b2c8d1331eb9494e29039e8cdcdc3e098441ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144201 Malicious code in koa-postgres-blaze-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6cdae761bee4ee4e8ae8294fde8b8c4d62a37e14f8b704bf9fa3dee5d856c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140868 Malicious code in colors-xenon-non-blocking-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e573e2a8a72f5fdcdddcdb295e20389f2b205a62fa514b5699b3b3e88eb048c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146528 Malicious code in private-antares-command-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d5b92538efc5003fd39ea6c07c4688b0790c70dbc5345a0b1bfbaa470acab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-altair-farout-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3dec0a7142346b708feacb4f333b65f902175868929901f20759b12f56e8da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-kinetic-vega-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f052313de57a449d3ba0452395a8a82d566127cc64dcde2d2840853d301a7270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-eslint-plugin-quark-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706839edf2b666a4f9ca7c829230ca1869eada44401afc05d260eec76ec24e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-colors-native-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab01a52a3f41b139889ce3357bc601b3f2ca49d5a2913f21185e024b9c3e0aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-leda-framework-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8e962cc443d3c769a93da076a5922db0b0a446f38de08dadcd7bf23a644230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-query-phoenix-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f920c6984fb239672b94fc29d9b92cf39958ef99654a15f50fd99e57f70399a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-gravity-css-loader-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-virgo-cordelia-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e07b7ec5a3ebdcdcfced2c14aa60be59406831219a126661a9b616532b03b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-oauth-fork-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc0a76c49b1d70b7ecaa8be3efcd35bff4e3da8c178acfd5c0d01ea58834e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-commitizen-xanthus-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a116873bf32c289aafa5fd60f4935b886ca7e2741da3cc20430738596c680c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-solis-hydra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204e4c944e5588742767a5571cfc83804f233a9273e1e095b54ca7a84a00cae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-stop-magellan-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425754f6af251723808e87b0e68201bf2b4a32eae0c5a5bf3b342e6f57b62f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...