MAL-2025-146038 Malicious code in pegasus-iota-config-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7ee901b19693d954ff98d4cca16f606bc47bb75e7ed26766e07d75e3a35761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141954 Malicious code in elektra-toml-chalk-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66426a9b987a26db0a85bfe40dbc680fbd76e9a476684312d2f5f4d1ea4da689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140921 Malicious code in command-scorpius-octans-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703d0a719bc5af84b7e2aef0b2df611546d2041a15a9d8bc5055dcc5fa5c5b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148087 Malicious code in solis-spawn-vuetify-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed1c25e4ff43497e859926f784162a09b2dcd843db09507d4116ad823328901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143200 Malicious code in heka-apex-firebase-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41f0381091ae082e9458edd8f1ec765ed4a9a451424985ffabe6a53d08441cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140386 Malicious code in capella-duplex-upgrade-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea0537e1d4f6441625d140f225246350b2f419c999df9095d0aa0b6fdd48e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139271 Malicious code in aldebaran-charon-pegasus-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808b7e01fc3390efda5a9efa37e7d1917a9fbe55cd61b8a33611ec40ce69b373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147541 Malicious code in run-script-charon-rigel-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b81c14674542e9356c3817bc7e5d57607720d23252ff3006a97b314cf0b872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139465 Malicious code in antd-repository-nightwatch-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde768a62bd4e0456e3d2fc3c4821ad83196bda6f38a03574724730c1a7e44a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143541 Malicious code in impulse-dotenv-safe-prompts-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00977fe89791751a5929d9c14386109d623c440e9303ce064db9d658963cf4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148337 Malicious code in style-loader-radiant-wezen-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d58f33f057d544f20b90cc7eaf4e8efdaf877ed6e74e3ec3a817441c19fe082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145823 Malicious code in ophiuchus-janus-middleware-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afa7455ca0f55d55daa0b481bbe00bb64a2bebf660d267ff2e2621bef86843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140771 Malicious code in chromedriver-fornax-stop-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be70b7b1e7d4b70f16763b44d920025a6e3d26eae494c87e150d068726f876af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141146 Malicious code in corvus-callisto-hercules-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d99f24f56cb7e133b01201ecd9215855d54fc7a3fa3079ad2d1d61ff216ac59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139750 Malicious code in auth0-kinetic-halley-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d235ed679c71a9c92ea843e98ce02b27b0f5d8037cee666eeb409341bd9bd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146717 Malicious code in proxima-helmet-schema-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c995599cbe52eeb9442e68f9fe9ff41d1f1b8074946fbb0b96de6f120630700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140714 Malicious code in chariklo-spectron-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d78c278ecff4ebaff38abca456c02346ef98a651fbad21ad8f688104cf4822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147005 Malicious code in quito-subscription-neptune-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70002200c66b5b4cc0f28f3f46ad6a34726cb88aae438ffc6a091fe5ed4e7af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148626 Malicious code in tethys-nova-changelog-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91cd76444f1127ad2a02cdb347e60a363ca07cf1a9ab39ddef4716deb7014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141098 Malicious code in cordelia-cressida-quantum-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27661cfc261a53a02a9701df91b624e832b0af05f032fa459f8ce8ed27561fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...