MAL-2025-145251 Malicious code in mysql-kinetic-xenos-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054698a44ce91b0b7fe53abd054c720e6d4f9043f3a13653cf4a9c0f1afe346a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144934 Malicious code in meteor-sedna-markdownlint-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24b23272bb9a9b6fe57ada512032b74918ee0417d5834f858230c532e1bc667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145030 Malicious code in miranda-elektra-epimetheus-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bc92613c692f422e1eeb84e62b6d937606f05483376161f03de703a402e984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140145 Malicious code in browserify-update-publish-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24bb06a9bd2ef47ffef67f44536c0d250ec84117202527337d00c75f442ad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143901 Malicious code in jekyll-delphinus-buffer-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5e8c03989ae055f37acf391f30e62c3186125cb4d040556c28201b59b96f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143722 Malicious code in iota-event-lynx-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b31d097f97b245a36810ad6bb745e92e23442c4ff914b6c5a8a2b4a1438923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142419 Malicious code in farout-neptune-dione-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0c1d2d632485105b695892cfdf331ec228fa9c0c4b44667c6207987bd0b91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146676 Malicious code in prompts-wasat-charon-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812a5f00b2abfe082d0356b8481321b48341d4051a93e24483b59a2c6ad66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143293 Malicious code in hercules-readable-xenon-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44ad932f34bf96ece8178f87b5f7a03046958f3e909aa804cc780b75f2a85ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140428 Malicious code in carpo-adonis-draco-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f98bec85b5fc4e33b7bfac2687c0cf98d9b8227cdb2d94523ed5fcccb2162d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143575 Malicious code in indus-resolvers-regulus-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409c9280aa687fece421d6f06022969bc704c4e4883823547dbb67afa933118f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149448 Malicious code in weywot-warp-carpo-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef0aa9f96763aefd511c2e6daea8c00dbcc1312a8985e4638d5c11873a0dee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145988 Malicious code in passport-websockets-apollo-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181d5bf8f8e773b12665333b95e60d88264ca346871341c8131c2f24facc5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141412 Malicious code in cypress-zephyr-hermes-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5312ff2f2eb883e7009af94b18a0548fedbf555a65fcc27a3bf2790bb616e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147280 Malicious code in repository-prompts-rate-limiter-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf377bb81f4927325b2351ce7a12400024c12876e52b462e3cd4f8643761011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145623 Malicious code in non-blocking-start-sequelize-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ffed84011da7ff0250f24168284da93d72934329a901ecb2db3c4fabc09fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140626 Malicious code in chakra-ui-rigel-juno-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc1b03abef0e3356b99e70b0a43bc51cce4025f472502f9ccfb1d25af92caf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145584 Malicious code in nodemon-miranda-rollup-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820c175b0702fa017ab87ec0bca09c1c7eb09bf223bbc7cd11a4cec271b1ff02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140893 Malicious code in comet-tethys-phoebe-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc78fa48a337684e6465a66e09dc89ef50524700c030b2af9dcdf128f864afd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...