MAL-2025-146676 Malicious code in prompts-wasat-charon-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812a5f00b2abfe082d0356b8481321b48341d4051a93e24483b59a2c6ad66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143293 Malicious code in hercules-readable-xenon-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44ad932f34bf96ece8178f87b5f7a03046958f3e909aa804cc780b75f2a85ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140428 Malicious code in carpo-adonis-draco-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f98bec85b5fc4e33b7bfac2687c0cf98d9b8227cdb2d94523ed5fcccb2162d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143575 Malicious code in indus-resolvers-regulus-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409c9280aa687fece421d6f06022969bc704c4e4883823547dbb67afa933118f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149448 Malicious code in weywot-warp-carpo-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef0aa9f96763aefd511c2e6daea8c00dbcc1312a8985e4638d5c11873a0dee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145988 Malicious code in passport-websockets-apollo-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181d5bf8f8e773b12665333b95e60d88264ca346871341c8131c2f24facc5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141412 Malicious code in cypress-zephyr-hermes-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5312ff2f2eb883e7009af94b18a0548fedbf555a65fcc27a3bf2790bb616e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147280 Malicious code in repository-prompts-rate-limiter-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf377bb81f4927325b2351ce7a12400024c12876e52b462e3cd4f8643761011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145623 Malicious code in non-blocking-start-sequelize-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ffed84011da7ff0250f24168284da93d72934329a901ecb2db3c4fabc09fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140626 Malicious code in chakra-ui-rigel-juno-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc1b03abef0e3356b99e70b0a43bc51cce4025f472502f9ccfb1d25af92caf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145584 Malicious code in nodemon-miranda-rollup-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820c175b0702fa017ab87ec0bca09c1c7eb09bf223bbc7cd11a4cec271b1ff02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140893 Malicious code in comet-tethys-phoebe-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc78fa48a337684e6465a66e09dc89ef50524700c030b2af9dcdf128f864afd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149225 Malicious code in vulcan-browserify-non-blocking-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f75a901684e76d93228851b85ee37e80b481a39a673e1769eefa38f79d23ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147025 Malicious code in radiant-superagent-ganymede-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab4e17ca04eda20c7350db8dee121f4d4ff7f072f496ca889fcb66c812136c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139774 Malicious code in avior-loglevel-hercules-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a673a6c10ed1fb774ba0a37635703be63874a22ef2aae819b4fb1d6461e8efbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146048 Malicious code in pegasus-redis-jwt-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029211974165cff66e42351cf6175e104e89284a986f021fc112f1c0b00c02c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145596 Malicious code in nodemon-sqlite-winston-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99427134c76d688a13b33e727fee9f53f8d75d046e9f0d8e90664af4a7005932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142230 Malicious code in eslint-plugin-dynamo-axios-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609bae32965b6115352a6c6f0a2e3f26630ab7c7a85532b8c34e12ada679b9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145993 Malicious code in pavo-buffer-terser-webpack-plugin-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d2e79cf0f1f1b83d87d8c6546e35fff84daf20d8b66d13f5c3ce3cf02a1209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145002 Malicious code in mira-atlas-event-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d0b59465aeb110ed77aa5dc35e61cee72f2d0b21f1d84fadeab03f8f243a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...