MAL-2025-139447 Malicious code in antares-vuetify-nightmare-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb05e72399b628edf6a0b1f2964386424efab1b44c0b544971072d2594867b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147290 Malicious code in request-cordelia-cypress-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66fb1c730dec97f29ade6b1d6795405786d119efa2bdade8c8b96b568991474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142153 Malicious code in eridanus-nightwatch-draco-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897faea076021827c61bfaaf49e286cca7ae17bae43b9fff7e94eb35c29e8b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147295 Malicious code in request-hyperion-gridsome-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7865deb1459e7037f7abb2849c9868bff4ee00079f4c78d1fe2341bb6e0fb540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143210 Malicious code in heka-ophiuchus-cache-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a88089822f8c73b5b0395551f87a7a085394fb6497c4c9d5cc2a81edb29f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140103 Malicious code in bootstrap-fornax-miranda-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b002a965cbaac43533196a62f03eb1874cd008b25ff59bba86a86282f9f535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140745 Malicious code in child-process-fornax-ophiuchus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e14ba578f9389f96c9befb8dff2098b3c6d0e1be62aca0d7dfb57d570ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144549 Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149672 Malicious code in xenon-xenos-sadr-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8462fcddb73bf27d7bcabb1adc1a6ab4a89bb78f09ca7930c977f334739514f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139224 Malicious code in aether-avior-enceladus-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce1c47ba5445dda49daeca42e550f04bec27ff0a7d15fef9aba199e2ed0641f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147973 Malicious code in sirius-resolvers-pm2-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b5cbb1e0e4935676cf3ee3d871ea76f06f61c680035426f909d71303cc289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143171 Malicious code in halley-vulcan-nightwatch-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba8459812b58b3adb0a734a6bc6f6acbcea1e099036c9801ce7b9bc035bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148427 Malicious code in sync-norma-algol-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ad09764898dc0af2247a64191afb7bbd40d6247e262240655bde8603b8a716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141361 Malicious code in csv-ultra-wezen-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1858d3c966b6f580575064487e3a89444dbbd196a7324183c8b834a2b42ec59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144561 Malicious code in loopback-readable-meissa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2117bd95d718c11d1d7d6fc5d2cb578836a47b121782b374e510f1375c7c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144425 Malicious code in link-solis-promise-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3c59989ecc8eae4a83da38af7837d57dde9a10c501c636c5a57588afabd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140552 Malicious code in centaurus-rimraf-install-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a20fc42722644aab92bd2ddc6bca3420470cac4cf0326c16962a9a81849fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141818 Malicious code in duplex-procyon-polaris-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f150630be124e004b880b0b1ddb3db1a1a90e4dc246b805c544c181e3e6f32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141827 Malicious code in dynamo-jwt-figures-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd3975230bea9be10d63c55ca1aad40d879ee3f650bf54db20e9824353ae13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-europa-install-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c34f5b580e515d57b2f97959e41b59126793c501180fdc1ce97b11c5f06699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...