MAL-2025-141498 Malicious code in deimos-juno-sails-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e4b06a4470db17fd32754a1e07a0049aa27cd7bbe27db48e0a893f47e90d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145914 Malicious code in orbit-transport-pulsar-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0ac9a87883bd4a5728f0a6a2441250aab1ea05641e171ea404f77c2d8eb39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147022 Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145117 Malicious code in module-standard-ora-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88755bf75283ce7dd367f4f6818bef472087445a91b70eff84ecce41e2356c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148187 Malicious code in spinner-castor-commitizen-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d63d7d06b5a118a91516b5a41f47e4a941c8c4b433eab51718c01dda4b1f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142537 Malicious code in fomalhaut-chalk-hugo-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971e6e1e3334906cd75f5b98aa72feec872bad9119db2e22b00b998350a828d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147342 Malicious code in rest-colors-xenon-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea9c8aeb5c94be268f5eb954b7f3da9be1607c0683a980ae34c42e812feb1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144996 Malicious code in mini-css-extract-plugin-socketio-bellatrix-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c680f11fdec440013da9ef0793ba800927779914a1bc83a8b7749613a0921c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149884 Malicious code in zephyr-epimetheus-leda-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93bd7f26a0d6052f2458fbd2a4d3a22ce879f801883dec1ed4265a6116b6f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146540 Malicious code in private-radiant-cosmos-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1db17bb2525ea074c0d796c001b79ca20438eb3bfa571940a2c395f991052d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139838 Malicious code in axios-spawn-metalsmith-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3bb3d243839289eaa35ed8d5891af6115202b3b623619514dda00aefd13d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146729 Malicious code in proxima-process-grus-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e2ea0253eb4cbcf28c3e8526b146995a264704021ae0f5ee845fc8dfb8f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148805 Malicious code in transport-ursa-lyra-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89784435b215c5db5e4eb6a5d2aa6f1dcb7a376c23b852460333b436b548c6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142560 Malicious code in forever-apollo-oauth-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90943887c088c5605934a7f3eb8800f69d5e476dce2f64c9ae90f658706a9516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149252 Malicious code in vulcan-reveal-md-ora-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2277bd541ddffacbe9f8d9d3f072882300533890a4b3807ec413ee381b2b8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139715 Malicious code in auth-atlas-oauth-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff2e1a60b148d3151b2476f58874193bbcecd8ddd2bfee1f592bde3031ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144174 Malicious code in kinetic-impulse-polaris-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144240 Malicious code in lacerta-geckodriver-tool-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8ae917a5908e869976d6341f9b536915f6556c4e5f81dbad2c4dcd8bb32526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139709 Malicious code in aurora-readable-callisto-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eddfb3159d163d87730d4aac6ea741f38f591cecc27a0197f72edc1a0747bba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149467 Malicious code in wezen-rehype-redis-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14375635da7a696cea600e454c822828dee6718526529d62006d988686dcc595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...