MAL-2025-145801 Malicious code in odin-run-script-scripts-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79508cd48643557f134d37f5b6eb9f3da8274a39beb434b88d43ed6e801e5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145288 Malicious code in native-enif-redis-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 358c9bda4686aa3db9b99f3939d75fed692f50899fef39f730cbfd6189f1b391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139272 Malicious code in aldebaran-cressida-morgan-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff470efd34f66915cb29fb44804c26b3905d8a9b494cebe1dcd75a1a0d180f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149640 Malicious code in xanthus-zephyr-deimos-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ccfe0c43aafca1e1a13e11767e2e20951dec1dda7606e25cc0f63890bde69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147810 Malicious code in selenium-registry-capella-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ab3f71e7297e293a72649daae86808b298edb1456fd5e8450176bf422af724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146096 Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf8a0f3e47fb0a4d035bbab3e87f2d08c738bc482b0680f20049920a2b45498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141732 Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9c03c53a96b3a1aa932f003782deaf85651c39cb3869bece3e210ab9492631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146630 Malicious code in procyon-zephyr-gacrux-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b36dd182333e223a07c14e080a25615a128d34c5de792bd9756e21634425f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142031 Malicious code in enceladus-nebula-fornax-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c11c5e234551c51c428218f768448a985e46be8ea1ada6b02335b438eb02b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141031 Malicious code in config-lyra-solis-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e93918839bfb75a9a119aa6c35c5cdf81d305773332ba2da44822c50953cf32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141724 Malicious code in dotenv-parse-variables-jwt-soap-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ba016402a8e1f026cecd68e7a2e6cd6724f0a32d050b391c7016e08c40022a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143432 Malicious code in husky-xml-dagda-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee168c20fdd786ce490576e77ab42a5f0f5a285a2cb3b5a2bdda2d5906509c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148925 Malicious code in umbra-mutation-morgan-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f51402fb8b8c25416667a5b7b23d3fe2005b81480481f1b4b256cb4a9f4c822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141260 Malicious code in cross-env-nightmare-public-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89aba308c0195b2c6c00b9e83e8ad088d62e10fe41045b98ace2fcaac2f491d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148513 Malicious code in terser-cluster-algol-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ad9eb31e5a64d83c11a0551757ea0c97a5028a5f923f835b9280752613526e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144686 Malicious code in markdown-pdf-cache-apollo-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3815f58127f89e6f52171beee5149e5ca18d95ab4a7b7434c014b0b5595525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141461 Malicious code in dagda-aquarius-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f696dec9028c1ccf5ff7366778658b3df225e2bc8174ac216fa5b5fa5a39e8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-aether-enceladus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72ac2bb7e1588639a15767799edb1be2133b975a202be1a2e499f7f41565d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-markdown-cli-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91e420dffdd3b632425f0ab36ce3acc96e1a91ca101b3bf8e554a24c98aa932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-oberon-mongodb-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0201ed3bfdeb13d9226e95c1bd978f463a415a0f7ed42402380176b350640e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...