MAL-2025-144031 Malicious code in juno-magellan-acamar-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e99251e7b6d6da522255aeedd0b8687a7e623c19e891943c12469e07c795ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148284 Malicious code in start-ursa-nodejs-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593bc23c8976e4718436bc2e85ed27103ac307c4bd87d7308b8a3d041620871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147146 Malicious code in regulus-framework-chai-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dec6125e6eda21ae58cd523b9bcf05322c40958c07333127c5f29c35ea7baa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-virgo-pegasus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146821 Malicious code in publish-vuetify-deimos-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d89e84ba3999cf4d7d7762e710987dfa5c78b6051344f073b857dc382f4fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143344 Malicious code in hexo-json-auth-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176ed21787b8042b7644509435dd8c82624164ccede2ee2697b1634227e21ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147110 Malicious code in redis-module-prompts-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7746c84f9eea454bb717d63fee8f847784b838bc466466fd555a66c2c65e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142546 Malicious code in fomalhaut-lyra-public-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554f92f32e9f1975ef75e2126185f9e18aa72351820f046d97f9c6bfaefa4c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148080 Malicious code in solis-node-config-antares-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2c8da07ae20da8b6e8ebb222294ddec9a48db903489a63c5a274d038252f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143806 Malicious code in janus-elara-draco-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d02531fca99bec533cae3ffbff32de807805bb87a92ebfd783d35ddf8013a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141559 Malicious code in deneb-testcafe-dotenv-safe-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a6f8049199b598ac6a94328e799d71ab971e6ac6641d4f180daf58200cba22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145619 Malicious code in non-blocking-prettier-plugin-markdown-enceladus-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c410beb76d57deeff1423e4a69bd221b151286e7e4b5237718fee546aad5035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146360 Malicious code in polaris-playwright-pino-pretty-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8892c21f6df4f87c858182cca8bee21e62506e8c59267e6e6ff77129b8089d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143397 Malicious code in hugo-react-bootstrap-nestjs-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afec8441ea00da53d6434b7d12ff98efb7ce3e538f9991c06c260651f60ce95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142316 Malicious code in event-mensa-rest-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a65f4dda3fd0300c35264d927cbb117a47362558fdbb5fb44120cf40b246cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-react-bootstrap-development-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b093b4a8a3b03954d6d7276fd2edf1d96030f0ffc91240dc63f59f9213f8fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-atlas-oauth-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff2e1a60b148d3151b2476f58874193bbcecd8ddd2bfee1f592bde3031ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-carpo-enceladus-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9631a095d3153517d02bcfb2904010b8de2609252d7d52ac4ae5d8876779a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148984 Malicious code in unuk-sass-loader-nuxtjs-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98c1aecea27a26e074cbf3b04cb9c22efd7f403daac4a7d58d309d2717a226b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145138 Malicious code in mongodb-rate-limiter-sagitta-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e103233460522c7309a14483bace6fde42720b89098c9209f4e77d9a5d28da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...