MAL-2025-141081 Malicious code in convict-pavo-kaus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dedd338de94ab3aca08a7d7afb89baa6958507406e3a7ae194da178bea1971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148893 Malicious code in ultra-exec-event-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441716421f5d5b913842f86b85b33d31d07b792fe47e55353a179bfa02342063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144257 Malicious code in leda-async-nodejs-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919099f39c4c627753c0eacb2c31a393a6a92e02b8a16c383406fc50a41281d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140096 Malicious code in bootstrap-arcturus-helios-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3947299fa044b87eb92f53308452eb8cfc390a2fdb66832a2c0fa232ac75a0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141599 Malicious code in despina-json-standard-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8bd6b352029ad45252a1342f1a9e98156faac7a089148feeee497d82180982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139340 Malicious code in alphard-rest-slides-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000bc6d60c2e882024d14774757d45f887e1685e183159005595d91a44a2f2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145591 Malicious code in nodemon-procyon-async-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406323274fbbac08d27d4f8696c166bcd7c5e3cb75bf00e2b4894f6ea9e2bed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143426 Malicious code in husky-quito-electron-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8537ea6cd46b2fb0b9e192dddb173edc80c3c0f12cd7f312f1f3eef1d4ff4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142546 Malicious code in fomalhaut-lyra-public-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554f92f32e9f1975ef75e2126185f9e18aa72351820f046d97f9c6bfaefa4c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141802 Malicious code in duplex-andromeda-xanthus-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a4bd8d58e794be3d15039990dda69c9d3e45aa26ebd1e2ba5afeffaa379e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148080 Malicious code in solis-node-config-antares-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2c8da07ae20da8b6e8ebb222294ddec9a48db903489a63c5a274d038252f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148042 Malicious code in soap-zenith-commitlint-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0edf0102ed5998d6e60cdb42442e4079415c2e2d1ec9e6a64a15ccf0ef1a857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141559 Malicious code in deneb-testcafe-dotenv-safe-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a6f8049199b598ac6a94328e799d71ab971e6ac6641d4f180daf58200cba22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141698 Malicious code in dorado-uglify-js-gemini-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8912171b68a913feaa979fa26a61e925d98cb34760af2bac8aa1baf35290f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149093 Malicious code in vega-library-schema-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dcc95f4dea0db952210a246c97eca63e5bda6d4afe8728102b9082fb2aeeef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147110 Malicious code in redis-module-prompts-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7746c84f9eea454bb717d63fee8f847784b838bc466466fd555a66c2c65e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144362 Malicious code in levels-slides-build-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8543e56fca41cf3dcb13c8ac2ec0d8d25c903a3e0f9631e4a714703b371323a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148056 Malicious code in socketio-levels-izar-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84eff04b5c572409de5edfc7288ab325e0b895580f68d2370bebc0b185e7edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147146 Malicious code in regulus-framework-chai-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dec6125e6eda21ae58cd523b9bcf05322c40958c07333127c5f29c35ea7baa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139633 Malicious code in async-package-spinner-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67481eaff1ab609487e64181fec0c051ced741075c652753d934342f610f9fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...