MAL-2025-149865 Malicious code in zenobia-cluster-package-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403eacbc4e8c829cda478a410fd600fef4b12a8d2286f53a393b36e45c6f891a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140472 Malicious code in cassini-nebula-sequelize-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8b6defadeadfadb68bfd95b13446d554fd4ec1136399b5cd0f0dead9135c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139622 Malicious code in async-centauri-sirius-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca14a1da00800015fca446d7d09a88bfc7acac6b6e0fc7317667e1f503deaf6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144400 Malicious code in link-babel-test-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c03bc6eb57af4be938384971609abf1c0bf21731f0b1d63ec7163677493ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140712 Malicious code in chariklo-scripts-gridsome-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6e9f83f68193644d7a1ca433c0ba23ca7f0845e667969d027039193d7adc21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143568 Malicious code in indus-meissa-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8770522c3fd3f632c35f7721e8ffb1be3ac635d15c09b8d80c5fe9c999b844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148660 Malicious code in thuban-parcel-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a2162f7ddcda39a5718acfc616b26db22ce8a0e0da7efc71531e95185cefd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149266 Malicious code in warp-comet-csrf-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95efdb76a77c45a47564e1fc7a242ae41eeaa72b4429cab3af068e68a2d8772a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149873 Malicious code in zenobia-sails-chariklo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd4814d994186a5660f22e03e2f758cbfca20ba3b3dd80dd97a01dac7ca3a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144996 Malicious code in mini-css-extract-plugin-socketio-bellatrix-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c680f11fdec440013da9ef0793ba800927779914a1bc83a8b7749613a0921c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149018 Malicious code in upgrade-jovian-yakutsk-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942daf1809f1a933ec556875072240b54cce259a5cafdd8782ecc48976749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142390 Malicious code in express-pyxis-sails-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1185fc0d42439e9df48781b08bbf46abcbb40b9f5715d77e835e5d53d1bbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141168 Malicious code in corvus-tool-eris-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147543 Malicious code in run-script-fornax-buffer-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3752fdd8a7fac85a02d1b9f3d783e990616dac37d1fc6cc93d0d1d4049ef7cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149698 Malicious code in xerxes-astro-axios-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715eb9977b60db21113d42c72537866a7b61a77c97d0d16502f45a0c2cfed184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139838 Malicious code in axios-spawn-metalsmith-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3bb3d243839289eaa35ed8d5891af6115202b3b623619514dda00aefd13d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143373 Malicious code in html-webpack-plugin-sync-perseus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d54e21caa1696cf3cef247fe0d1e27b9dc0c37818e8ab73e05d4850ef300030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148749 Malicious code in tool-proxima-shelljs-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 700c548dddf10ca56e72c2b175f0ec0af8b18e39f9d0a0033c32499e6a5e8872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143847 Malicious code in jasmine-bunyan-hydra-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562c5bdccf2f66b6c5ea71416bdc7a627f6cf8e331b72ecaecb4431ca64cdf7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141225 Malicious code in cressida-castor-await-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77705b3475b64f9c2feb49b57d114cb8a2433b79f6491f7a30c291524c61c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...