MAL-2025-144281 Malicious code in leda-miranda-oberon-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461eb1aaa170f1ade3866b64f4560dc0a875eb7da1242e23479da25eb4790740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142426 Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147432 Malicious code in rigel-less-lint-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0250b17d1e824b9261142e2ef10bcd989d933f1fe55d49cfd55a9fc7ff406bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144370 Malicious code in library-betelgeuse-yonder-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d464d999af81bcaceefdd858dd914d406dc75800c99c9aaf27487492862826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145268 Malicious code in nashira-betelgeuse-server-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114e106d1af305fd424f041b938c63ed588b82a0134eed432a6241a89e0288be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143316 Malicious code in hermes-enceladus-commitizen-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f766d5ff337f93d816e6e76ebadb6d46154771716ce960f02b416fb7c476ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140681 Malicious code in changelog-rollup-proxima-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbce01fe12dee0ad06db12fcd44184e7a2fa4e4ae51be17a138168babedebe9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141449 Malicious code in dactyl-postcss-slidev-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3e11e1b3e1354449c8d22e5413f49cc8fb31984d234abd2bf4530e6885e9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140979 Malicious code in commitlint-enif-pegasus-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c272bc0ff476d7d02b5023202fd9c3128fc3140648d0c21d3c5517fa9fdf7724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148289 Malicious code in stop-chakra-ui-html-webpack-plugin-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a04beb1d94e9aa6142f6535b0c0dcc3320aaeb6a53e45353f3211d6f345730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145196 Malicious code in mui-carpo-publish-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2be34a3c332013cc6fbf0b15eebd1688174c135148bd0bc0053a46ddf30815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145825 Malicious code in ophiuchus-kinetic-development-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7cead306982c4e53b259b7fe60ba0baf7a14b6ea52db778371e3b45751817ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139251 Malicious code in airbnb-chariklo-elara-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cac66982265c4f2d61202648e76580f5db3c11392d6a416f61414a7233a5bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140772 Malicious code in chromedriver-foundation-ophiuchus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734cc0e1a4fdbcbaa4277defdafd1411ff42c898978cefc6ce410b296ec7f58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141735 Malicious code in dotenv-parse-variables-readable-dactyl-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3fe8fba115d5787ca57c1183f16a661fb0dd62f372ba2f47737309bd8cd39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145044 Malicious code in miranda-nightwatch-restart-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e05781ad182212ac85a19ff8ecbf78ba5331343f610183fa9964e7432031b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144085 Malicious code in jwt-semantic-ui-nuxtjs-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce61a1544c50500c9f832240d3b153ca30544b6968fd92fff24c6576d0beeb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145285 Malicious code in native-backend-dotenv-safe-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781f6d6927036e8ba7935aa91fcf468079fe5edef66c51944922fd9b13d986e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142815 Malicious code in ganymede-procyon-gulp-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c3622c9620d1f5db3a00260053942b400b3c7190d56eb40b53dfd21296efbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149762 Malicious code in yakutsk-chai-css-minimizer-webpack-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5302087986235bd39e060db5a14525c740168f2e57d7920582b9991970f2ade5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...