MAL-2025-145357 Malicious code in neptune-elektra-transport-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5619d2615186fb3d2337f8ba716e0bf713e08317404287f6c4d9e7596f1c4b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147436 Malicious code in rigel-module-ariel-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5430b6080ec3b26d7c4d27ebfc869276db25cfcba262c4909bdcdd3fc72261c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141128 Malicious code in cors-levels-babel-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e3036f605baee68a2b7ae5a594db1d71a83877342ddfc786b34586f7318a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148124 Malicious code in spectron-regulus-superagent-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc13f76788773d5d2e87dd70334fb448f2b74ba088626599ff5a7c8a2cf7481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143647 Malicious code in inquirer-frontend-changelog-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c250a136f5d0990b830b851b42d887b841167f96ed2d9628e6dc86facc74ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149516 Malicious code in winston-nodemon-electron-builder-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd4fc533ec723fb7ba42bc781479f72f08c672242f24a09e80136673b1b2b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143669 Malicious code in install-betelgeuse-zenith-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a08b8d9f256af66e0829d46984add840408b56494c471b1c80839bea17a9bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147541 Malicious code in run-script-charon-rigel-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b81c14674542e9356c3817bc7e5d57607720d23252ff3006a97b314cf0b872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149006 Malicious code in upgrade-centauri-query-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b3af104c42cd1e6c28d871a3de3cda443af276c5ae82679a43424867c39f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143682 Malicious code in install-rimraf-nova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147403 Malicious code in restart-yaml-celeste-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0f181b1bb1ae9fda5a31bf4d95640d8bae1a6e22c7bb78e99361c16301ad38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139915 Malicious code in barnard-nova-sass-loader-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b57c9e983fd48309f566dee903920286b373bc535312593f2305034cd2ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143184 Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47665784ad522eb04cacf6b2f03e8ae0ac57786dd4012aa6cff0c9b286a13ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149295 Malicious code in wasat-mui-sadr-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f3d8a941c3cd94b52f529a2a61733938e427dfadb021a5552b6cdffe5d6a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147124 Malicious code in registry-eris-grunt-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7589992e4db8381ae4a8bb741b6a5cc07e702fcf848a2966e18024222885cf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147609 Malicious code in sagitta-polaris-markdownlint-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ada06cf4bada5df5defef68478de548bcf7148fe39f7c3cb5dfa4e16d3ecbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143145 Malicious code in halley-hugo-node-config-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18d81c7012eb412f8679db20a766a516042723987121a382c43cbce0300fee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144607 Malicious code in lyra-eleventy-phenomic-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781feae0250f509d58698804ac377422ae24d83a75e63818a4dd45c7520a7fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148989 Malicious code in update-airbnb-dione-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd75e4671ee3cf03a883d7bb91717226977806f05620164ec92500c25a6748d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149640 Malicious code in xanthus-zephyr-deimos-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ccfe0c43aafca1e1a13e11767e2e20951dec1dda7606e25cc0f63890bde69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...