MAL-2025-142390 Malicious code in express-pyxis-sails-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1185fc0d42439e9df48781b08bbf46abcbb40b9f5715d77e835e5d53d1bbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141168 Malicious code in corvus-tool-eris-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147543 Malicious code in run-script-fornax-buffer-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3752fdd8a7fac85a02d1b9f3d783e990616dac37d1fc6cc93d0d1d4049ef7cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149698 Malicious code in xerxes-astro-axios-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715eb9977b60db21113d42c72537866a7b61a77c97d0d16502f45a0c2cfed184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139838 Malicious code in axios-spawn-metalsmith-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3bb3d243839289eaa35ed8d5891af6115202b3b623619514dda00aefd13d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143373 Malicious code in html-webpack-plugin-sync-perseus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d54e21caa1696cf3cef247fe0d1e27b9dc0c37818e8ab73e05d4850ef300030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146447 Malicious code in postgres-sails-jekyll-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c170bde2a901bccd8b720d04cd1ea7242dc06d4dd4124518eb9fe8c5fe30e49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148749 Malicious code in tool-proxima-shelljs-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 700c548dddf10ca56e72c2b175f0ec0af8b18e39f9d0a0033c32499e6a5e8872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143847 Malicious code in jasmine-bunyan-hydra-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562c5bdccf2f66b6c5ea71416bdc7a627f6cf8e331b72ecaecb4431ca64cdf7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141225 Malicious code in cressida-castor-await-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77705b3475b64f9c2feb49b57d114cb8a2433b79f6491f7a30c291524c61c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139265 Malicious code in airbnb-unuk-cosmos-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce898b52c94e42ee07b7975ef14215d4954b631a47a0c5637fa525a9742b1800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144885 Malicious code in metalsmith-octans-update-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4291d1a26c48c6ab0fa71474f7d1d7ba0447d623c90bbc2eeb32dbbb4ef370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144827 Malicious code in meissa-polaris-upgrade-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db7937233c7ae7519dcca1407d39174c3082cb36a627f6276572d315cb4abf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143799 Malicious code in janus-aquarius-perseus-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b3084860f2cb8217adf7746c16acd98753704e6c2ba7267ba93cab716f9bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143725 Malicious code in iota-fomalhaut-less-loader-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0ec46f8e20a1a9d4098250978e555733b981be3fecc9e2382809291a2de13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146593 Malicious code in procyon-ganymede-foundation-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd8ff9b18481f1f0e39f42b03b654b1dca4dc879cf92f172796dd1a2a2aa249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141328 Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e20a22a9c22769398e8739c99b3cb32ee807c0d7b81540638278571f89a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145250 Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142560 Malicious code in forever-apollo-oauth-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90943887c088c5605934a7f3eb8800f69d5e476dce2f64c9ae90f658706a9516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141510 Malicious code in delphinus-andromeda-jasmine-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ddb6526ddb58ea3ca57c2cc5afd76d135b8bc9b76babdfa5237dfd09ed5308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...