MAL-2025-142805 Malicious code in ganymede-io-canopus-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f96f8497b5084e3ebe52ebc88c51353e9d17e69efa58a47766155ec4ba9b577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140411 Malicious code in carina-impulse-slidev-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ae1f871514ee10efacea0fa8c481ee0c8e1e234293b01a5215f6c2c8d3e048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145226 Malicious code in mutation-meteor-magellan-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad0f7fa2e74c20daa9b3f81c38a60a8931c569c640500f618ba1c97ffa9ac0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142518 Malicious code in firebase-webdriver-manager-vega-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2331c563f4209ebffb0a5c8826e03fcc872d483903190d99b1729555388ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147888 Malicious code in server-acamar-izar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03a7fdab3a572c9f4cca3c5140cce027ed69ed81f12cd697baef6fb41f96591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147459 Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144238 Malicious code in lacerta-electron-gemini-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7e0b7753b1e3940c0e8d9594dd3fa95f29c0b4284b8c99b957e293100a8c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141240 Malicious code in cressida-redis-figures-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853d0818e04260dfdeb005b6f14b23c93dfb6a83530ff481737aceaa44cd7d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142218 Malicious code in eslint-fomalhaut-lint-staged-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb105ce95665918097d4d61401177afe8ca59a34d9f9753e8c40e94ae07b8d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141165 Malicious code in corvus-puppeteer-eslint-config-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a339ee93474eeaf05bb0ccc6e79ce00d741a53f99c8a1e41fed151288239494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142731 Malicious code in fusion-element-ui-browserify-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3ceb40b6042bd1dc98340857c23502250ba04d1b033674c17a6d37bb7559a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145950 Malicious code in parcel-aurora-pegasus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850d9ceb923ea3b8c1fae4e07e33f2a81a4e2efb322eab5c70dcae054468a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-thuban-centaurus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deee308073cd092d17a74292e5cebc2292e92286732c43f143f213de23e65479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142428 Malicious code in farout-vega-vulcan-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1d9a2f5748a775bb91bcf43460d2e5250749c958745fd3b927b2f4ad17a9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-axios-babel-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf95012ad35bf05dc6070a021a48ea1bcca166e963aa2404e5322f93c71b73bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147735 Malicious code in scripts-loop-zephyr-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d858326367fb5a479f89e8a5c5167fcd21703e0e73a9fad660ddd332f1f78c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148275 Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ca9dec5af3f6986b7abaf03d78477121b87d0e5875637fd40a490404dd5368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145458 Malicious code in nightwatch-chai-nuxtjs-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d5d5ea2f7c4831b445a53c4b04bc94d73aba09dc480a3bb8fbcc203881eec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144220 Malicious code in kronos-grus-iota-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db435aa072da87e3cd2d851ea479363d8f2614b417ea1a476c6693b7e935fa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147286 Malicious code in repository-xanadu-pyxis-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d27d81cca2421fb3dddc365c7570d41ec582b527729acbdecad4bf1c86aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...