MAL-2025-149172 Malicious code in virgo-toml-passport-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584f8b619a6b42d51e3495d518d1c3de32ee362ccd4c539987a484b1f3711094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148663 Malicious code in thuban-rollup-plugin-chariklo-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc146fbdfc420e6edf55add804abf5db01e4546ae4b3d20978b40a12d156f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146210 Malicious code in pino-castor-titan-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8380998eb6ab5ab3193a5728bf932f73e6aa50cafd200f74fa9f30a8daf4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143724 Malicious code in iota-fetch-cressida-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c4f0e250d0f01e37aa7792b1b4a8643a196c2c813a8e3e6686f406cf1d3ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148936 Malicious code in umbriel-chai-celeste-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb53ad9f8260d9f1a374259b5f212dbf32617f7afc84f7ce85b009b16a3e5db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145395 Malicious code in nestjs-fork-draco-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c955d990db2c8b50291158cda63b6a0c64616f530042044ca39f552cee4010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146583 Malicious code in procyon-commitizen-transform-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7956d128813d337b1eff7b6337caa03611f4c893733335c524c0a1d4df948799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140076 Malicious code in bootes-despina-capella-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d6d6dd2fd50fbfb69d2a5c2e9d2d735e5bce93f882407139e9ebc1e18f011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146148 Malicious code in phoebe-dactyl-hydra-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15069d6c517ba07a6ed22a9fc3941b90f3ed7cd9171a1029f4f45dd9c8976e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-andromeda-castor-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929e6cb843cb440dd09ec05cefcc35ae1d4ca70fdc73a2c735b543f582ccde8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-apollo-xenon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edbb8ecb72415ce0c0623a1d88fab94233dda638e82c410ab6280b3fd621c2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-epimetheus-leda-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93bd7f26a0d6052f2458fbd2a4d3a22ce879f801883dec1ed4265a6116b6f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147896 Malicious code in server-element-ui-aldebaran-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe35319a0e1502f611d4adf34672070439f01d604657bca8167ebf2b2aefa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143858 Malicious code in jasmine-mui-yakutsk-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928553531d3c4b998456ef1ebd1e1ea1aff5299daaec81eb8dc255384d96a05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147439 Malicious code in rigel-radiant-uglify-js-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85630c33cb4c0ec6a482317d825de7dd864dfc1abf5642f7f91212d8139d7c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147730 Malicious code in scripts-eridanus-duplex-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142469 Malicious code in figures-hermes-epimetheus-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b612fe95675cbb0a0e6f234cde2ea648298bae877b8ce1e7502504f603be40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145236 Malicious code in mysql-apex-nova-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18771f3a23c620676b417659010bb8e144cd21f20e46bd086c478a0702361a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143977 Malicious code in json-nashira-kinetic-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc765289a745bfa7fb547425100b136323a1de12b213766030bab7718297c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143017 Malicious code in gravity-babel-lint-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a3b28da6c63c75d153189ed52ace7876ed614e4e5a0dd5668034af33cfb653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...