MAL-2025-144915 Malicious code in meteor-iota-ophiuchus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b0ff1cdf2157479d762189676161efb8616723cf3c47dcda0abc29af08734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142324 Malicious code in event-sedna-elektra-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aaf62dc662a6d8b1068d1c49bd2b9ec972d870646a3b2987a8882ceac957b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139673 Malicious code in auriga-babel-ceres-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28d45d234dcd5dce8347016dad2d69193815a03f58182ce50419b00a8c02ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146117 Malicious code in perseus-spectron-dione-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e15fab69ae105e30fba7e3a24c1bc57c283d108f92197936c36532b038d9c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142875 Malicious code in geckodriver-miranda-mongodb-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8b3f508ce99a7cf07e6d280b4cc7f00d5c36232af66cf25d68dc9777b6cf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139202 Malicious code in achernar-morgan-gulp-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a498c5b041add19cd34cff6f6ea4b481d4f6807e31d95256fdfcc433fba769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141474 Malicious code in dagda-jabbah-xenos-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678aea84d3e17daf26a71a1227863e69cfc430bb5d394a840da880b8ae787a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146643 Malicious code in promise-markdown-zephyr-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387a151346281441ebe5a92d11f527bece4335ed634483aa3ab8fbaa90bcca42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149060 Malicious code in ursa-jupiter-antares-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9475e6896f644cad679372be114f300b3ac25f0ab22b63a70f074f55dd053c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142312 Malicious code in event-fetch-epimetheus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41d7ec23ccd2fad63599eec79ef61acb71decba3e9dc176f355979acc910918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141813 Malicious code in duplex-jsonp-zenobia-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4493a244923a35fb8a9ac3f82cca657c698d3415f7a87aa9582c28d6a90acb4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149252 Malicious code in vulcan-reveal-md-ora-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2277bd541ddffacbe9f8d9d3f072882300533890a4b3807ec413ee381b2b8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143444 Malicious code in hydra-hermes-weywot-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f42a1d329c45393542f9e8ec59bed9df73c594eee4af007134fa1f73d8b3b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142293 Malicious code in europa-start-shelljs-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5108c6eb4fe974479b148f8a7ca0b102bd58ee2cf874ab49721bb9ee4552d701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145810 Malicious code in ophiuchus-chai-standard-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ff30be482fd254786af5632794902b68dcc17f3312a77d047101242c71adea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148672 Malicious code in titan-buffer-sagitta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd25da2ea12c17bfcc8b82c1f080529ed705b80141907868b255187769fd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146729 Malicious code in proxima-process-grus-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e2ea0253eb4cbcf28c3e8526b146995a264704021ae0f5ee845fc8dfb8f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140774 Malicious code in chromedriver-husky-flare-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427eea3861085f119e61e49f48fcc8a63b170484eae6227054dbe4fe1b2baded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145178 Malicious code in morgan-init-auth0-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1f7b65df5a3817d7d4aac2c24f406242e5012e4e015ce3e0b482c989f3fbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144697 Malicious code in markdown-pdf-nebula-ursa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e869b886c6b587ad65d90412d52a84099eb19a953c7c45b7087ccc4d3723aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...