MAL-2025-145571 Malicious code in nodejs-miranda-socketio-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec621e6726eab4c97228945d899750c0f1ad4ebfd72f119c1b2c51100b87228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143723 Malicious code in iota-farout-aquarius-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6481513bad4c7765f5cfbf7dd5138500e3e165cb7064776b23ada96b85c9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142079 Malicious code in envconfig-mira-carpo-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6368a46c8d4b8201f4df6cacad6539edd4ae6b601e9188e95b4f4417da8d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144007 Malicious code in jsonp-sagitta-proxima-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa753953218b29386b71fd301e0f77b7ee751f4c3fe229d8ada58d8b4905b054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142675 Malicious code in foundation-vortex-semantic-ui-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326fc01021205b3e567805f4fd529b0b14559710cce5370242b5556050f9648e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148722 Malicious code in toml-transform-colors-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d70cd2849f53b4ee927dbd5ce6124dc606282f9efcab3a38d79e9435a06b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143058 Malicious code in grunt-cross-env-init-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34decaafc378b9a592dd5041b73feaad1354d542ee8269da457cd618683baf7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145791 Malicious code in odin-corvus-proxima-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811b28197d36ff15b0b3d34580e11b3c4b00810b291206222cb8d2fe300d2f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146291 Malicious code in pm2-algol-flare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d16774e2cee4ea961f6c348bf4e92a499bdf16408452f147c123b2cd2506eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143154 Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8f8e6d03c3daf00589833a3797e608a89883125a45d9cff367282e9f6585f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147144 Malicious code in regulus-child-process-sedna-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92628e4cf50816fb3ee4ea583a632a948793f90ae4c1989204e7a51cc652bf38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146188 Malicious code in phoebe-wolf-ceres-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed97b6ad1f4394f2f2fb590260d9b665d49322e8448ea75d7cb49a81d052790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144335 Malicious code in less-loader-toml-private-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497b8201962b4d3aea7518648553d817621cb4351fa1743b801b30d6659b7352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141907 Malicious code in electron-builder-leda-astro-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66f13bb1ee8af20bc55eee9c56fa3ad914ff33aea7d902a57b02f6c1cc34ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139636 Malicious code in async-procyon-webdriver-manager-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82623baeedc62747604851f9eaed098914336c250e96eb832088f7207a106c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147730 Malicious code in scripts-eridanus-duplex-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146658 Malicious code in promise-yildun-html-webpack-plugin-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f516760bc57a8ec8d22c128a4277234f4b318ecd20f0497088a49ac229b1d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149057 Malicious code in ursa-hapi-nextjs-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc029820500dd4024972c48dd57913360342c872ec20c9566e573b7bfa03dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148390 Malicious code in supervisor-centauri-aether-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a19158ab0964c26c031c48bf99bc4fe2f208abf9dfe80b638f260dd235aacc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141151 Malicious code in corvus-elektra-meteor-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec321cc8d8a1cb04ceb61935280a6bf3e36c4d2762d39ecac3715152c646fce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...