MAL-2025-149771 Malicious code in yakutsk-init-neptune-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a512de47dacac8b7e10ad032e5bdb245b16bd64d64ebf701bbd3adf8efbc71c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145056 Malicious code in miranda-rigel-webdriver-manager-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bdc0dfd44e9ef24f1f26a65a9dde8fe116137932c6a13652c8544024480f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145777 Malicious code in octans-pino-spawn-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acae40544dae96658957457b5ded4ab869bd33160c695cfed84d96c16b7950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143144 Malicious code in halley-grunt-firebase-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143251 Malicious code in helmet-eleventy-eclipse-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d31b4ffee6662a3c1074ec7d4f79a4fb5fc5a5e087c4aab4d53c6054de2a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141709 Malicious code in dotenv-parse-variables-axios-rimraf-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74e83a98501868b14b36dc23df3d406f687182616811541cd1317ec9c0d1129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147531 Malicious code in rollup-proxima-norma-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41f1435c6ff772f6d45f5d824fd1e24986248756b51185f6ec68060a126947c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147139 Malicious code in regulus-apex-package-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59a05a19349911216fdb272750a19dba669a24491c9ff6994f3988897384906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142546 Malicious code in fomalhaut-lyra-public-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554f92f32e9f1975ef75e2126185f9e18aa72351820f046d97f9c6bfaefa4c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147932 Malicious code in shelljs-warp-mongoose-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6018cc36beddcfdf04b6db21a67f004b60c11db09ff11b6a4015d3b06e4f15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142403 Malicious code in farout-chromedriver-aurora-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b98547be9e19d5bc0cfb5d20c3f5dcd85c8c38d403eb7042af8d27946d36a4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141235 Malicious code in cressida-ini-markdownlint-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65662cda736d980784b56270f444cf897c757c5fde067bd14ebded2277d2d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144130 Malicious code in kastra-quantum-public-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124f32f9ca1bb4dec77e4c7dfd7d93584f92b71a291ca7d219c1c986fa6a3f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143103 Malicious code in grus-taurus-xml-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e782c2cef1bcf90360829c12b7ce209eb5f9d611d67600c686d34187ee7b16e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-ursa-upgrade-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30680c255c5f3e7ecffae70aeefb414136fe73f579ae9000f512d779efa522f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-react-bootstrap-commitlint-config-angular-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2830a2fb96d2b57865f9092fb10f30f5a3f718fe0e9e982c4761680dc9e7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-karma-markdown-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2aa2e20a555341ba29c9fd65ce99ccd09df033527d93d3ac4e13a578a97bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-reveal-md-antares-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc48de705e14b0fc19c38e6070047b60ded65999d88f313efbde52229f4b8df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-dorado-hyperion-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8659173b63fc0521c5da9433000bf134a4cc63464820c15a17a0fabc844a3ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-cypress-perseus-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba32422cc6145356c90d43a80fb2674a7e813479285c4b7355450904a54e6349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...