MAL-2025-145760 Malicious code in octans-antares-ursa-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d65cea319abb6430e6df11d60acefaed5f3195819f12b93113c64affb4b9cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143278 Malicious code in hercules-convict-indus-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7242dca6f6b47df2e61e95dbc7b3ae53b2eb59021756a5a4ff56352a8137a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-castor-ophiuchus-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9974665bae787c95a53b225627dbad7b63f5036dde9ea0330b70f1b73b5aa9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145411 Malicious code in nextjs-carina-pino-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4608a8302d32cd394e18d23f01b225db5954475612fa415ecb6e02f8021d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147652 Malicious code in sails-markdownlint-husky-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deac6805d708e640aa50b6d65b29fad2ecf88b4cf854aacaa08dc114863dfcc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140780 Malicious code in chromedriver-oauth-janus-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62791def0816e082916b2005bff9eba87cfce1a7b2c95e38f692ff526ac514aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146051 Malicious code in pegasus-sedna-nebula-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45388b7519c742a25b573574840b632ba3027a54fdfb1a8f56896bd3a65e63ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143200 Malicious code in heka-apex-firebase-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41f0381091ae082e9458edd8f1ec765ed4a9a451424985ffabe6a53d08441cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149150 Malicious code in virgo-blitz-dagda-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ceb461493519fd852399f556b21d8c0ec514f74c1d9cfd064ccc69febfe0faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148592 Malicious code in testcafe-equinox-rate-limiter-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 830d11bb383e202f127224d082db8697943104502bf0c48ca97a4f120141df74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148734 Malicious code in tool-fornax-polaris-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1049392870b38d519a3ecf2f7d0f83d0a1b5d27c0e2622d309fef12fba1118a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142512 Malicious code in firebase-sagitta-tool-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9f0e4b922b003c40ad9a7753fe86040398d2220a37c9273a23abf24bcd4318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141956 Malicious code in elektra-xenos-hyperion-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622e4cf898444df4d0d6ae7bbb2c00661a7a28fe96576b4b7a4e0661621304e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147879 Malicious code in sequelize-standard-terser-webpack-plugin-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5497a671c1aebf3e09ba8f4b72a87f5f04dbb1c4d50e8410873150d2e2023aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148092 Malicious code in solis-vulcan-rollup-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a96b0f5b122804f3f0847ff18d7c5f0863a146490fdf7fec20ee26e5c12a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146872 Malicious code in pyxis-config-eslint-plugin-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9039999becb8512da6baec8c9a9785c430ce5c276938dacaed4906dcbcde51d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148085 Malicious code in solis-sedna-loopback-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557dc7a79fcec22550edb2484b4642de358e3bcb886a741c248d597a992bb19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148803 Malicious code in transport-stream-nebula-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38e7a1ab56efe7764e9f41c224575c50e02d176028d4cdc32466f22022aae16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141322 Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2036bd03a92e217ea6354ba65928a8ff78ecbf6c59fc278e254c0d1d3153fa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149828 Malicious code in yonder-acamar-terser-webpack-plugin-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d67598092c99278899708ccaf956db5b784f63e8cf0fea187c25b581869382a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...