MAL-2025-144820 Malicious code in meissa-orbit-bootes-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2f3aee0366b8961da6c68fcdf85a8a959fc9725a26442353bb2f5b173161e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146070 Malicious code in perseus-blaze-pegasus-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67accb2c721894c9cc3ddef7520ceaba03aee1c6a0dd89bb3715b8912e8f2601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140847 Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6116a38ab2e392b9841b501586a3f93c8ecb5457593cd69dd4d601275c119002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142602 Malicious code in fork-vega-kaus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e7e3ab2e551d64f307ad5edc6b7efbe70b2b77c5666c59cbdd9ac9e67d50b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144606 Malicious code in lyra-elara-mongodb-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c379c674d57bf6ddd4cc912a0a3a0399b8b2db79a58e7383a36469c02ffe92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146044 Malicious code in pegasus-nuxtjs-nightwatch-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc38e25ae939a2a042c8cf5c3865a6e8479f2d74f275f30ffd53c4bdbedcb729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145436 Malicious code in nightmare-event-blitz-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766f03cefd972d44198c480800afb0ecbe61155b28ff37abf26a9d7aece78ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149559 Malicious code in wolf-polaris-zenith-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1643ba9c60e4293e98858a7181689d7e040b596aac65aeef89d18ba0c6ea3ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142897 Malicious code in gemini-enceladus-thuban-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8661679b1077c5c21fbcd3671502a87927310f0826b2a9a9638a8362b6fc53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142765 Malicious code in gacrux-galaxy-loopback-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe9574eada5f7856d57a924bdfe32e8ebcfe2ef5419865a35394d25b67e09fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142823 Malicious code in ganymede-sqlite-proxima-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a316a48264e7551e91cad378c7efbf597ad83c23babf83db479f50338e26a6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148090 Malicious code in solis-sqlite-phoebe-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68930a3bb62183db59be60a97ce209a4b1f7ec8908589e1ca718a0080708f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143214 Malicious code in heka-private-electron-builder-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efc83769ffc86634fb8641fd68519805cdc2c8c3d59fbda9c45f154c7b48d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143962 Malicious code in json-algol-antares-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63c510d3d3960c943e308a47987df9ca39faffaf1ad6c29a13497998b1ae469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141358 Malicious code in csv-sedna-epimetheus-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a5060dfd3949e3872cfe6c37f816c552aa746dfd9a6dc0404a706d24cc47b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146334 Malicious code in polaris-despina-galaxy-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20baeb4de7139e23de09686c30c274bbcbbd52b6a4b6ceec47ce9c6ac321597c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143006 Malicious code in graphql-orbit-csrf-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947709eb4c67dddd2c3beb0b9c8b47c7a310dfddfda1f9499574825d9538b59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149756 Malicious code in xo-reveal-md-halley-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4ffe68d4da6b27060a10d7befaea1c304a6a918f1fdb9553e6672a68bad986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149313 Malicious code in webdriver-manager-chromedriver-fusion-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea532cf50fb845dc6bfc7bd4d8d1fb78a1e79e90fb526d9c58d9205399e22df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145839 Malicious code in ophiuchus-rest-pyxis-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547b7500947c13f7570bcf6fe144a0da3824389089069c1d4651b017b265c190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...