MAL-2025-145011 Malicious code in mira-janus-mongoose-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0171b3e4f13eb46e037d4896a616a9276aa90bacfb5cd5c1f5e85e1cc27fadda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146909 Malicious code in quantum-mensa-callback-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c4af59ccdf081d321a6234c0e30dc04ed83eeaf768d85866f80c9b81d02f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146729 Malicious code in proxima-process-grus-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e2ea0253eb4cbcf28c3e8526b146995a264704021ae0f5ee845fc8dfb8f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140933 Malicious code in commitizen-jekyll-antares-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc26d4847edeaaac6173481b164fe0df5a90f1bb3a3ba1dda00ef38a4eaa118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-draco-radiant-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef4283767c604951c602fff1cabbf32b15abda81f6a7f587bc4a8dabab43c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142507 Malicious code in firebase-playwright-comet-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d883cae754a7de5adaf031e19a74cb9d8c2fa836bb6d9a02a43474cdfb3dcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140512 Malicious code in celeste-loop-nightwatch-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8831623cd3ce919a2e1cf64530b543fce464aaf11766e4316e23d373c57b103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139564 Malicious code in arcturus-ariel-install-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a80cf0a64a22f38a82d52ff34e6e0d8162043c7109b0ced96ece487449a15f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146634 Malicious code in promise-castor-pyxis-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e998a570333fa94903c03deacaff2fab31b844d926782cde24c805305d916e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143168 Malicious code in halley-spectron-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73c947e71aa2563113e69cae4a5ed27b095147d625872993d40c732a020be3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141325 Malicious code in css-minimizer-webpack-plugin-eleventy-writable-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c809fff64854b81d5e2dd566778b8b3f0b3593ce2d0a3267e2f2772472b028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144355 Malicious code in levels-levels-ora-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4502d31e1f09441ce3987a7b5f54e91d5b3b26deb2544d135b60d2e3face816f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139842 Malicious code in axios-virgo-registry-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15200d0c006ec0dca8523bfb533339e3be63eff22858e13a97047e073a292e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-scorpius-meissa-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7039f8688ed4618719306a36c9e5c803751ab0b749811306decf282c7cdad2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-mini-css-extract-plugin-test-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d47c46e0374aed5c5f7d4341c5a6a16c64a371572dcd61558df3ac91e327c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-antares-flare-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5bdc635e072a475177d4dadf2c9890985c9678f720a2ef69952a4feb3c3dc28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-acamar-sequelize-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d953ff4007470886cb9390d415da40753ccb4bac042bf6d7663fead61bc4797d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-leda-regulus-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8f0689326fa30f2f33ca0e7b640cd54c8dba70d9fa36308272b06574817d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-hyperion-soap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc172a6e98714542897ff86e8b096def8bd773c0f7a8b2d9a6dde31dba23d298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-nightwatch-nashira-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed0de3858c18672b89b9bc94035d6db8bcf216c001f9385e80ea20767b99f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...