MAL-2025-143024 Malicious code in gravity-flare-async-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afaee9c4dea8100f153b287b329c31392a468c2d17a4394f167daf28eee72e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148450 Malicious code in tailwindcss-playwright-lacerta-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1208ff45dd006a097793072c093d443a2de50d88981ecb93b4111e96b46ba2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149156 Malicious code in virgo-global-superagent-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8563f28a2a27d7861250bad8476d45d2682ca1232f97b8792980d923d60542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-zenobia-passport-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eca8c97cb6ac0779080fceb9527f7442614f57c2e63e5ddc7208cc5d617a013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144201 Malicious code in koa-postgres-blaze-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6cdae761bee4ee4e8ae8294fde8b8c4d62a37e14f8b704bf9fa3dee5d856c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145041 Malicious code in miranda-less-mensa-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc4e4c231f13e5fecc93bd7ea1c4f26d7f4e00913d6f3b2104cb008a253169e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146528 Malicious code in private-antares-command-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d5b92538efc5003fd39ea6c07c4688b0790c70dbc5345a0b1bfbaa470acab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-superagent-enif-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5f582d1fcc8b43d9206c0d7ff651f4fd9297da9b6c8bfcd5c44adbf762e6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-docusaurus-non-blocking-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fdab9b3209bc358b61efb8b106ce359d5a5937e4814e8bc1c5730e704cdc49c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-astro-publish-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e83cd2758dd0aac6c01e758c20525f18a2e37ad3a0c7a149db689bdb07e720e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-castor-titan-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8380998eb6ab5ab3193a5728bf932f73e6aa50cafd200f74fa9f30a8daf4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-geckodriver-indus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a404f4f502807faf59f086fb270b93cb0957ba5be2459cb87729937e8168620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-chakra-ui-luna-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5906ee4986d40f97876630539dd8bd9592cc5f5d37491360a280122f0aa9f4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-configstore-envconfig-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ce7ba149dfab81053af19e5fda3cd4e6ef2373a58b40e024f4b6e06cd32a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143003 Malicious code in graphql-gatsby-aquarius-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14047635487fb6f2384b47629b34b22e9f878ee9d1fa29e1f9ddda750bf3122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146560 Malicious code in process-nashira-alphard-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d892e0621ffd010621c749e7224836ac446d06f96c997e37d0d3e3eb69033e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149462 Malicious code in wezen-mira-morgan-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aced490826c2d7edbe824a07a4bbed1a8ee680171c14127269d06d326744906a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147730 Malicious code in scripts-eridanus-duplex-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149679 Malicious code in xenos-gridsome-start-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b803824790abb3a2c7df66fb5fc2f1b0dac8a77b5bdee59ede4cc7b02092a0ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148184 Malicious code in spinner-adonis-jest-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ce7a252c8fb466cb202f8d2441a363fa351a5ccf8b69a0cfdd48a0238bb6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...