MAL-2025-141146 Malicious code in corvus-callisto-hercules-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d99f24f56cb7e133b01201ecd9215855d54fc7a3fa3079ad2d1d61ff216ac59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147566 Malicious code in sadr-loglevel-bootstrap-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6389511cc6288738f716df02c33481d1278cbd9fcb41a5db671475496f03c9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144022 Malicious code in juno-comet-meissa-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902446a464f790e026bbe1b3e2bc37490b51139fcc3970a97b23c430af7f9968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141850 Malicious code in eclipse-forever-prompts-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2034ba99b3fac3845b32a389d7bd18a7f63cdd0abbde72b03416fab0083e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145455 Malicious code in nightwatch-airbnb-deimos-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f752fa734e2490fe968e90b4d52adc3051e7439e54ad5906eb124cad4812e8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141108 Malicious code in cordelia-protractor-csrf-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c24419253cec7c8e17b9a14f16c69c46e113f822774ab82772c739370114dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146059 Malicious code in pegasus-terser-mongoose-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e082163d5827b000c5b136c6eb51be24e66954f12fd324992aae6f786120cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148277 Malicious code in start-norma-izar-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6202e4dd1c6acb703f9349e84d06f1a5c9572de5e85b4679f9f4475475283e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147120 Malicious code in registry-barnard-hexo-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a0cb32bc739b4e12da3b97af7219a39e39d08684785a2f14222f4843f003da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148500 Malicious code in telesto-readable-forever-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a42f9d68db37c59cb3b7fec781665652d4c469c2a608557b035bc57058412f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144928 Malicious code in meteor-readable-dactyl-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94388570f96da505278819c6e146b9c7c3d8e2e1288e526202fbeaf4fb4fec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148040 Malicious code in soap-winston-antares-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4d78de5a7e83ac0f3732587e429926c070200f55ddc3718d36e34b490d7f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143946 Malicious code in jovian-docusaurus-carpo-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e17822857865f3476661e6af731756d9683c17d07a7873ad69a30b5c919b6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143432 Malicious code in husky-xml-dagda-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee168c20fdd786ce490576e77ab42a5f0f5a285a2cb3b5a2bdda2d5906509c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139451 Malicious code in antares-xerxes-elektra-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d475342fd46e1b5411c65070ae1c4bddd5372c66609e943409a0f8c8c40477b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146606 Malicious code in procyon-mongoose-meteor-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6f06f34d61e17c30e370b3cd08343aed4d0f6b607db2ca3213a5a7459d1512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144617 Malicious code in lyra-unuk-rocket-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4295093b68906c766ccc987733aa97fdd69c60c503b7a32a52f6623c22ddb722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148170 Malicious code in spica-nextjs-draco-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104bee7c9443b8b60097c56006cf5a5de3a744041d0782374f5a0436e9132b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139750 Malicious code in auth0-kinetic-halley-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d235ed679c71a9c92ea843e98ce02b27b0f5d8037cee666eeb409341bd9bd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146267 Malicious code in pipe-query-puppeteer-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 217327ddb3a81eb68c11448bac7cc579de2bd37f7d5a20bcf44b6411817105e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...