MAL-2025-148029 Malicious code in soap-pavo-barnard-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c60fb41ebbaf22e751bb38346303fce0e6f2ea2eb0e75b6a3e91c73e8781911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148891 Malicious code in ultra-dynamo-foundation-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b3b669ae32646ba1904a37fbdc812c5d0f58c8de7e5ea540f79e65395d1991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146085 Malicious code in perseus-express-playwright-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb17399521f39eec5d3c3f8c312bb8e5218debe3c4ad158eecd500a1806e988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149115 Malicious code in venus-materialize-middleware-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7edf3762282a5e21f97e55705f10dce56e313a7824add172bb388fa0ff9e452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149286 Malicious code in wasat-enceladus-rate-limiter-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15f38df4dd9bcd623e077041fd6fe4147a12433ae157325ae3cc9a4cb9908c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140873 Malicious code in comet-cygnus-antd-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6bff291e01fd22857014fd822605071aa490ab3fd33da969a70753a7b9f34a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145144 Malicious code in mongodb-yildun-event-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415b4bae99cc9b1568c32a6c2a8aa3eff44332f1ed641713a550cfb1969e937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142443 Malicious code in fetch-event-cosmiconfig-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b1de624bc1c101df86ed334fbb6c5575ad72d38d45302ba2c4709aff2df39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141915 Malicious code in electron-fork-mira-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cfca6cb2c335fe1f49ef9979402387599d2e54f4a5c4a3ffdaf8a61f577746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147806 Malicious code in selenium-mensa-xo-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35fecc8fad9cbba384f0222c2b9cbf21220083ecd5a1a258e3cd02eae7a83b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143234 Malicious code in helios-html-webpack-plugin-colors-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ca9906844a152840e647de99226967674d883cd6fd3e8fa73c798a11b93d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147879 Malicious code in sequelize-standard-terser-webpack-plugin-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5497a671c1aebf3e09ba8f4b72a87f5f04dbb1c4d50e8410873150d2e2023aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140109 Malicious code in bootstrap-jabbah-xenos-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33710dce388dd4b632ad1567acb21a3bbcdd1c599582c1c9ee8d2f1bfb012a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140860 Malicious code in colors-procyon-materialize-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf32de71538c5a3fc936507de3a7014c69435ee1c7ace63acb5b28f209849a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149899 Malicious code in zephyr-yildun-docusaurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400b1598db4b5a863e70c4e4eb420101eaa2ffc4863cbfa4bc809a637b75f3e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144862 Malicious code in mensa-readable-nuxtjs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996539962812e89f55620996e24305e3dcbcd5363dcbbfa86f32540a8183ba45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148417 Malicious code in sync-centauri-impulse-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714eea88b1ac1b803edabb28accb30f2b86addb9885d388aa105fd12c99bf508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144732 Malicious code in markdownlint-zephyr-perseus-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2635991b7d8ec4de019d0f6887e3fe94ceae95748053607f691bf9178543ef21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144712 Malicious code in markdown-pdf-xerxes-janus-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2927d2275f3a1cc3ef9706981e9632a656fe4473fd8fcd6c14ec07464710180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139381 Malicious code in andromeda-phoebe-cressida-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c4728389a326c30c3c393099d29e3170fbfb8d7a0ddf8ac4487b8983494750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...