MAL-2025-141297 Malicious code in csrf-sirius-webpack-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f5169e615eb7117cca39dc150f8dd3157e2afaba84fc54bf3a94ae88a12680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143231 Malicious code in helios-event-carpo-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4ef0a390f4f22deb490f66721884877ad3efa3d335bb7d3ad8dbf168f43ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149537 Malicious code in winston-zephyr-nuxtjs-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912f6a1d7d2e2169fb6ca024f4ffec9fecad6da1c2231d994c692d1a85486a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144599 Malicious code in lynx-rollup-centaurus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591ec6229ab2705b8162f934c9e360700e809c8b16462a0ef13912f665240b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146102 Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146029 Malicious code in pegasus-ganymede-native-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0299fbc6c1fb17da9270c9c40c7ee1e1f3c36a76270c040a793e0f63ca2a63a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143610 Malicious code in ini-vuetify-test-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be5d587a84d0e961ff412a526515fd88cceea5cffce76773278d75a3fa00347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146858 Malicious code in puppeteer-pino-ursa-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7515fdbe15c9c7166a923b5aac6268128105b471683c0d39f2fbe2f131160e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139791 Malicious code in avior-webdriverio-scorpius-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8974cb5555bcd7e749d58f52450f3aa78f5e62beb1db5026d5d8d9bdbccd42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139427 Malicious code in antares-oauth-aquarius-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8de2d954f47de8eda9218163def03618141071159de4561fc06fab93639a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148035 Malicious code in soap-spica-gemini-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65bcfb260f49b1ede378ff977a58e4f393dc0062910f976fa5522ad95f9da14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149295 Malicious code in wasat-mui-sadr-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f3d8a941c3cd94b52f529a2a61733938e427dfadb021a5552b6cdffe5d6a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140162 Malicious code in buffer-mutation-changelog-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e6b39bd12e70f7e32d3f9df10e9c2f4c51ba4b5212e46797a8d7d6c521b505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146394 Malicious code in postcss-loader-europa-webdriver-mocha-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420b2d238f8b63539924380a7ae973c5a1f00146ed74ba4166c0ec6b1e96e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142338 Malicious code in exec-enceladus-axios-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33a062249bd440e99eeca3811d7f3872670382d064a5d70f13ec64a7bb23b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139524 Malicious code in apollo-quasar-hermes-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652e2d076c3ee69316f7b51ec59ecd9c44accaccb4af2c046cfab5c66c5133e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141180 Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144624 Malicious code in magellan-blitz-atlas-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340dbf5fc23d6a3011d549871d854a58569177ed1163b8a7fe224213778d119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148403 Malicious code in supervisor-sirius-chromedriver-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4341d925bc89fea46025829c726c45c0df2128b9cdbe42ab09851ce404f9a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141954 Malicious code in elektra-toml-chalk-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66426a9b987a26db0a85bfe40dbc680fbd76e9a476684312d2f5f4d1ea4da689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...