MAL-2025-141538 Malicious code in deneb-centauri-pulsar-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6526bda239de64c4d9457ab972fd6ad08c667ce2fed1a79a3cf3f4a444fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139593 Malicious code in ariel-ora-farout-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2499e2c6d1cc3c2e72747a240235163a36b37210b6a5635bc43e1476a8dc32ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139485 Malicious code in apex-request-relay-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d1817134d21724214f2fe946a873bdffacb372c5d66c6abf5cb9f37ed49b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143357 Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143971 Malicious code in json-docusaurus-cosmiconfig-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a9c7c0cb232f49b5048a19ae36888fbf26e1cd53ba27072f1a10a5c6de44de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145404 Malicious code in nestjs-sass-loader-pegasus-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6047bada6c6e40096c170843b308e373244e22ee727ddcb994dddfb4c306c896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141007 Malicious code in concurrently-hexo-weywot-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc8cda0f2eb6119ce7dccfd4014dedc2aeb7d4453e9ef894324d158b657e121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147428 Malicious code in rigel-aldebaran-lyra-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1e0c655120a046d2727b729878b1ac931f7f223d9cb61daeb683056fddba23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145956 Malicious code in parcel-eslint-config-castor-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed09a09c963d1bf3ef1d986a98accc358353ab58dfcebaa264519dedcfc5a6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139263 Malicious code in airbnb-terser-deneb-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e88e788e5051d47ac4462b17dcb5b384b0f924a8510c377fa0fa5a96a5a2d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148905 Malicious code in ultra-postgres-publish-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69ef1a05e965d83cfb4cb86ad322a2c76bdc4bcd679eaadd6fb496f43fe92bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146842 Malicious code in pulsar-radiant-cypress-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178bfda625ae6afb0496687a9c92e24aae195151c40703d0a50c6408ee55d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145631 Malicious code in non-blocking-writable-soap-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d6bfa5c0d577f0ebf3c7294acf34cfeac91f1b22fb6b71b5864ec0edf86df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141126 Malicious code in cors-hermes-apollo-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8bcb589b171f7dadbe0f8b5e826ef81fe76e4af63acc03e1c01fa3082a239e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147659 Malicious code in sass-loader-algol-perseus-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77664b9a0fb1e6506cf3e5b1505a16bda73fbef3380e9fa57914417417763e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140190 Malicious code in build-readable-react-bootstrap-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e775b6d0ca701f5683b2d7e970cdfefc9a9d539920c94864c59683252009ab1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145808 Malicious code in ophiuchus-callisto-leda-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d474ac48bb6136b5f28eebfe39fb40bccfc09cb06dec1492d3aa0382d4872c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140698 Malicious code in chariklo-ignite-less-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c288fec2d5387765684208aa7cf6ecab742922ab14ae5fed28c8176b4093ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142291 Malicious code in europa-scripts-betelgeuse-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8758ee005ea30461f9a67d19287676d1bd1758295212a07c48fde2f07926de95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147072 Malicious code in react-bootstrap-publish-concurrently-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ca53b27778645d89b96eb595882242733d814a4cfe82678efc4b8e67b9ab61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...