MAL-2025-145431 Malicious code in nightmare-cli-ursa-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c815f45736f8f59bd1582476c431a200edfecc2b39875a5ab386550f4e203eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149413 Malicious code in webpack-wasat-pyxis-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd09b6ad20379082e0839be824d7f3137181fc436b825bfbfc5b4d34d841fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143751 Malicious code in izar-aether-mensa-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045aac20a790e741d9cbefb0f063d5632d3512ec278156db660664363f032c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139811 Malicious code in await-umbra-selenium-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddd66a2a58453a45d8f98afeccd219c9311538192deed2efd4c7bd2639be23d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145828 Malicious code in ophiuchus-mongoose-warp-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fecd700567c4dcd4a37b5555359b2c372b61412335ed0d6f7bb32150d51446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145251 Malicious code in mysql-kinetic-xenos-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054698a44ce91b0b7fe53abd054c720e6d4f9043f3a13653cf4a9c0f1afe346a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142518 Malicious code in firebase-webdriver-manager-vega-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2331c563f4209ebffb0a5c8826e03fcc872d483903190d99b1729555388ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145910 Malicious code in orbit-odin-browserify-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4373b2e80376f5a44f87674dead5a592928eb383aa730aec851118d775331cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142444 Malicious code in fetch-halley-await-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49bc547d565dff9a16ca114112f58261d335b57e56672f1fd9262c73fb5a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149000 Malicious code in update-procyon-ophiuchus-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0ae1c5ac94da1bccd61aa20af4df863fe32433ee4bd8eae2921ec6d0e22556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142903 Malicious code in gemini-lyra-stop-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de05007ded0357f96c6580f461bd2d5f802efa82ccee17f4206e5a4433c0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148597 Malicious code in testcafe-impulse-auth-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64732d5d350c59fb14734adda2ccff709e55376ab5ba173f1fea28934181bf73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147857 Malicious code in semantic-ui-test-test-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39408caea52c1551fa2c025eaa9dc9638438e19eda194e02ea83b610ac1c75e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143222 Malicious code in heka-webpack-init-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa25d9b845420bb88d426ddf06a8cb9cb64c883ebb02a093672626c7e7b8637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140646 Malicious code in chalk-kaus-eslint-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4159c0dbbb89b303076efe400413c3f25ca847b455c5b90c4a461c76df3e9ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139694 Malicious code in auriga-zephyr-cosmiconfig-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5239f07833ff779bfa840185510eabd8b41c52aba14648b5989d7abaa83cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146684 Malicious code in protractor-europa-elektra-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5bff1274211f71d47aa49ddd63a8fb1fbe41e40c6e328bc1c8572c8cfc4c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142656 Malicious code in fornax-test-kronos-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 373b39091aad036983cc8935f0362078e6c6ae8a018b3d351bd14c6c67d98f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139890 Malicious code in backend-ini-sedna-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac10ffe129a3acf6c7b2b5dea29ac4add9f9af952e65ab935645e9abded6bfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149727 Malicious code in xml-aether-eleventy-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2ac218d0200b49353387650eb8b52e2f86cbe2247112a75355d2a383158a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...