MAL-2025-142392 Malicious code in express-titan-andromeda-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db56ca2e1f597d46076e860c53c02a5d847424aeba44464086eb792744037e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148834 Malicious code in triton-xml-ganymede-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c77b434f8e70b60ed9b41c1eb361d6c28e453ad16bb1bdee7d41360d322ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-config-bunyan-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271f5b41993cdab8696ed3c8a08371cdbc6ca90fca62b3ebd1fe492a130b7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142243 Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt-teal-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f124b2b9ae4a334e270a929e075ffe74689941d78356cfb0a02d6c2b73f918a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible-harlequin-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00748c3d2042e9b9898bd60ffeca3a9aac108a888ce82ab243cb07f27cdeed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138893 Malicious code in net-aqua-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1292b50a4c914df6a4cf3e6b10b3eb402d664283510b566a5875c88f52ba78f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138758 Malicious code in graceful-olive-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881decd5f2d5a8e3639665520cca8495ff5fd66a9d7e634181d480ff32a518b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139101 Malicious code in vishalgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b054b1f9806698cae3c70421a3f51632847d10f2bd35cdecf13096eef910d19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138773 Malicious code in hissing-moccasin-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdc8cf54d1a0f4d631242c472458584cd3c8a458610f8062f1d9c0d2d221046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying-harlequin-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0efc01ffd237e30ebc8d6127cd738b563f653d3dafc2d41d0dbb803d7037bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary-beige-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e48972d96ed25c00f6d2160d9dbda71c1c211617388949b22114b8da3fb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-brown-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d359311dccd9fb3b6036a649cfa736e2911a7cf9775a85cda371f6151087a7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound-amethyst-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34997eb623cf6eef95f9f3d394b5371c20678787484f9a0a028a537888cb1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical-ivory-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5b7bbab3582f3c1fb0a049f6a9a421973428cfb0a7169e201057bda504bad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-tomato-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00a21a7205d596964651bda256ca7a2fd53a0127505ad4fe4320c3027cb243e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery-emerald-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04db678b098a8dfad59ec0f2a60cc57030078dd629dec285d829585ed6eea3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138985 Malicious code in romantic-silver-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1510931cdd9bdcbb581abd2d21b6fb8cc8b9de1afdf7db21b5f8e2afaf979ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138867 Malicious code in mechanical-amber-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3b81d04b3eec8d7f7df1055c5e60213c983872f9d7c77f0b56a5b93294253a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138786 Malicious code in husky-ivory-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd790877abf20c0be41145737c373e5e0c49bdee0530f9deb3514e20fbbdf7fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...