MAL-2025-149625 Malicious code in xanthus-halley-gravity-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2029e560f0f7c0132ab1ff4bbde7603b0ac509b73a32937e5180b71d67fd68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142540 Malicious code in fomalhaut-ganymede-yildun-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8a7a0c5fcaed29a0f050cad3ab42d3b08497f20cd9f832ae73151d9fb0856f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147751 Malicious code in scripts-webdriver-mocha-promise-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a34b78be3854f8a312d3b05963d6757864622f5a0ee2876cc65de19051a402e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148682 Malicious code in titan-less-loader-mongoose-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f435d0c6225ef989e040df7f6dc37a6312c0b5c425590180a80e65fa144b165d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141799 Malicious code in draco-wasat-neptune-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3a50d36f059771d015ad833ded3b367018e0d184958b2768f1a46324dbd2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143918 Malicious code in jest-castor-stream-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3868868461930489c674de57569f0da76864293b834ad3f267fc02caa7689083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139404 Malicious code in antares-dagda-middleware-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ffcf858ce15c8cf2b6903a2a67f79e923a275ad287c517e0f23f1657995130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148030 Malicious code in soap-pavo-terser-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ffff8cf6a504a54d7a9a9b8193efbb4dfc00ae43a56bc384e678ccea487576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140949 Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-cache-galaxy-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6add171345211d071a5d346b6853f2ba78d089ff05584c0fe992c0bdc87d2b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-orbit-uglify-js-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60f9aa94c69a7c37a8439ad9a6720c7eafedc05f15f696808ea15458f28ecb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-delphinus-convict-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8c21db0ca3c2e3cdca7740c7b7694a527a0fa3c519ff73b575f380f1740876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaphahitt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840340691e856361c102c6717e363d16110ab650b76361f68d7ed9a921403cb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-neptune-mui-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10eed867170bdb10f37fc7c4c60669789a3178c8f7dffdd348dd2f58ae32db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-cosmos-soap-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe0f54fbc6915846fb2b13a32feffed132c1645ae6588717350c5848deb52a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-middleware-bellatrix-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558a753c5ec00d54999a3046a59f0048b6658f9f6baeda1a054887a37d664257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147379 Malicious code in restart-dotenv-safe-proxima-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b2a28babdc5c21d99d0090b1f63221b0965d85ddf0be16894320734a6a48ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149290 Malicious code in wasat-forever-frontend-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc2c3c62e9ed2291ebcb25f23e8a540fe788c53040c58fa9c4661bc5419b6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143718 Malicious code in iota-deneb-quark-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de80cbfc864aedcfd8310d41fddce90d2f3a5fbb40bd00045b7d081887b66bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144422 Malicious code in link-sails-promise-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6d1825fa8d2aeed6f1fd7dcad4ee8994ab9e7c7f12f453f35eee3d1a8265ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...