MAL-2025-146134 Malicious code in phenomic-got-uninstall-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c241c79c54717669b1615f6ff39fc3f1d6345216857f5d19eb4f75e5baed112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141220 Malicious code in cosmos-sirius-elektra-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 142855f368ae9311f0496c0eb37fc7d3e2721262d32ec4861a9a15af7ce9a823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149242 Malicious code in vulcan-kaus-deimos-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b454f36da9906e57ce0e664d3210736df3659cb3a5ef33e7f05864eb97f2067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144482 Malicious code in local-auriga-miranda-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf113f613d25eae6bdfefed5ddb02dd6df5cc88de9e599953906e96e2578637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148710 Malicious code in toml-flare-shelljs-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9a50bea50d2b9f5e10f4ba18591a19542069cf0a770373cdcfaf62efc6e746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145364 Malicious code in neptune-html-webpack-plugin-subscription-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e435d5ecbefe668b14f4d630c7b7256485e109617f1a86837e61fec8b51824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146892 Malicious code in pyxis-thuban-redis-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe69d2b2cf0e8724763b399bd63251ceec89ee464ac621facd41d7e590c4b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141519 Malicious code in delphinus-io-aldebaran-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d821ef98f08a1c0be384e1163096d7db814e10ae4f42e0e576ae0d3a45c7e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143631 Malicious code in init-solis-gravity-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce95d071c98aca7f71a3d08c4ff496456f80f37ec606612dbba7ad6d14bf5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145901 Malicious code in orbit-bellatrix-titan-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a567f1ed8455c1488e6bc4ec30bfc6f16a9ce9fad068780f75d21a0924f3c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149756 Malicious code in xo-reveal-md-halley-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4ffe68d4da6b27060a10d7befaea1c304a6a918f1fdb9553e6672a68bad986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145760 Malicious code in octans-antares-ursa-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d65cea319abb6430e6df11d60acefaed5f3195819f12b93113c64affb4b9cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144606 Malicious code in lyra-elara-mongodb-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c379c674d57bf6ddd4cc912a0a3a0399b8b2db79a58e7383a36469c02ffe92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141556 Malicious code in deneb-regulus-fork-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c6bd79fffbe62f81884637a6ed985b2a9026e1237ee0222ae438709e8275e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139482 Malicious code in apex-native-html-webpack-plugin-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849e662d6c1f289915ae6c1d104bbb2ed814a79d59ee65325b40f297d681e3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141456 Malicious code in dactyl-titan-cz-conventional-changelog-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ebcbb6b401a4e9dcf5b69e8d8f3e68be1a9f58d56f30831dd47a44939695ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142150 Malicious code in eridanus-markdown-pdf-regulus-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280fbe933f2aef105cf272fd45c745e56b45fc5f11e9d01d643c25d5fc4f1871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144704 Malicious code in markdown-pdf-perseus-aquarius-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7617a5dee3c988740b307aac4e4479554aff7a5312cd6057e19a9803e588729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147337 Malicious code in rest-adonis-framework-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdc97d6ec3057d62c70412d4694f39667435d58eb89479f96832d7ed4b1b46d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...