MAL-2025-146059 Malicious code in pegasus-terser-mongoose-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e082163d5827b000c5b136c6eb51be24e66954f12fd324992aae6f786120cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148500 Malicious code in telesto-readable-forever-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a42f9d68db37c59cb3b7fec781665652d4c469c2a608557b035bc57058412f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146085 Malicious code in perseus-express-playwright-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb17399521f39eec5d3c3f8c312bb8e5218debe3c4ad158eecd500a1806e988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143325 Malicious code in hermes-request-antares-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5735598cc672f8656c24783449a33a750bb3c27163408675778eaa624319e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140685 Malicious code in changelog-spawn-spectron-webdriver-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb9232c41cee975e4e3646f041c2c10d24472a10c0535ca5b38420c9aa76bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144051 Malicious code in jupiter-bunyan-tool-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8928e876b0f2f7dc596c3128c5fc8e0a7208ece48d1e902d00073c1726a6b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143257 Malicious code in helmet-nashira-carina-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3942757ca6d78d183bd70caaf20bd6ccf9cac9ee730bda9da89573f57e331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147566 Malicious code in sadr-loglevel-bootstrap-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6389511cc6288738f716df02c33481d1278cbd9fcb41a5db671475496f03c9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147204 Malicious code in relay-mocha-mutation-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba86765ad1d4909a393eb1d62de286cacd7f00f07a84862e0f6f275d9553d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143200 Malicious code in heka-apex-firebase-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41f0381091ae082e9458edd8f1ec765ed4a9a451424985ffabe6a53d08441cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145411 Malicious code in nextjs-carina-pino-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4608a8302d32cd394e18d23f01b225db5954475612fa415ecb6e02f8021d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145760 Malicious code in octans-antares-ursa-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d65cea319abb6430e6df11d60acefaed5f3195819f12b93113c64affb4b9cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143278 Malicious code in hercules-convict-indus-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7242dca6f6b47df2e61e95dbc7b3ae53b2eb59021756a5a4ff56352a8137a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148417 Malicious code in sync-centauri-impulse-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714eea88b1ac1b803edabb28accb30f2b86addb9885d388aa105fd12c99bf508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148215 Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57f12b0aed49526cc22a4e24142b150f9198614c3bae415e2ce627c100aff41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146259 Malicious code in pipe-await-got-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40e789ccbb5f530142799e6b4432dd8fbdcb5229c1554268b72c421195642d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149250 Malicious code in vulcan-query-vulcan-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e276c9a3d9ef975ca998a95544897408b9807e3f2b1209e34880c529e40caa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149150 Malicious code in virgo-blitz-dagda-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ceb461493519fd852399f556b21d8c0ec514f74c1d9cfd064ccc69febfe0faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142872 Malicious code in geckodriver-magellan-csv-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcb5295e48d36097f3e9d17b0d1580795374421d507e8f84f0bc5acb818b7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146740 Malicious code in proxima-slidev-middleware-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344684591780ddb2924ad9c248fd8d91d956e9e4ffe38df0593aa3a037c0a957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...