MAL-2025-146892 Malicious code in pyxis-thuban-redis-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe69d2b2cf0e8724763b399bd63251ceec89ee464ac621facd41d7e590c4b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141519 Malicious code in delphinus-io-aldebaran-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d821ef98f08a1c0be384e1163096d7db814e10ae4f42e0e576ae0d3a45c7e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143631 Malicious code in init-solis-gravity-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce95d071c98aca7f71a3d08c4ff496456f80f37ec606612dbba7ad6d14bf5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147839 Malicious code in semantic-release-update-kronos-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da546cb3c2bf0dd517acd0ea1b421c16b51e5572a631825d7770db5b7ac38f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145776 Malicious code in octans-mysql-titan-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5be0483f9f2d484a74a5e6c0d466892e53451bd24a35e171e8e7326188258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145187 Malicious code in morgan-release-it-umbriel-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3a7442fa158b3448186041804b991a98c63c2e060a0da1051863fc9ef2f804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142118 Malicious code in equinox-child-process-deneb-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fbe7ad61e9974fe7ed3d9c4b62c0e379c9a6f7dda87e121fc18ddfeb5770acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144606 Malicious code in lyra-elara-mongodb-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c379c674d57bf6ddd4cc912a0a3a0399b8b2db79a58e7383a36469c02ffe92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149158 Malicious code in virgo-halley-norma-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcd7da4e4986eec5dab4e8e83d3b4496f034399ef46a1ac01bc2c091f61fd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141456 Malicious code in dactyl-titan-cz-conventional-changelog-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ebcbb6b401a4e9dcf5b69e8d8f3e68be1a9f58d56f30831dd47a44939695ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142150 Malicious code in eridanus-markdown-pdf-regulus-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280fbe933f2aef105cf272fd45c745e56b45fc5f11e9d01d643c25d5fc4f1871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148146 Malicious code in spectron-webdriver-winston-vega-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc6bf05534f02b480ed0ff958277495405277626318a639399b5bdf20a51899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148090 Malicious code in solis-sqlite-phoebe-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68930a3bb62183db59be60a97ce209a4b1f7ec8908589e1ca718a0080708f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-hapi-csv-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c05bafde1be0d3c7cd14dc9a7063a15613942905627ffbbd560696a78aef88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-europa-janus-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52842dfe4c3d56eaf74f1fe88e00a70823584c27879777c26e497972044f8f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-xerxes-betelgeuse-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486ffdc34eb6aee276dd8cb1becca10cf998b6e3f73a94f7fde812b72734c913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-xanthus-less-loader-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30fd4b247599dd9ba70c60cc7739635c150dbf43b468f570acbaae0ad26e5127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-draco-blaze-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207ef2ba0846e5d36f057c85c4930563d7d0622d6842a09081f634ce315dd2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-mocha-start-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8b887874b9898ac0f6e0f183bc4dee8c0d7a569bb6ad9dd7ef8d6ebeefbed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-wasat-fornax-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b11210d9eda121cf11eccb91860419ad970b15ca9cd114ec8df21e82196e205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...