MAL-2025-145838 Malicious code in ophiuchus-radiant-prompts-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc515149db990a33e961c190e3feee1a52fd9630a5fb061e4dfc2df06dd82b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-jest-phoenix-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da9d26484cacf036aae45df31ca9b3abbfe96808215b041d3f959bbb10d4216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148113 Malicious code in spectron-cordelia-vortex-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924a3c2cbbe1ad8b5c0a087a6b8f6e373b3ed5196ce4c7554c5b23b4d3cc284a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140436 Malicious code in carpo-cors-react-bootstrap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d871110fa02601bd5617e3520de63bfc553c86eda11a0f3a7140b61843da2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139974 Malicious code in betelgeuse-css-loader-luna-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7654dd1b4c19ad5a052718f02b3a1ede2bb71de999bf5a77617045d18190864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147781 Malicious code in sedna-parcel-css-loader-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b20fdeac58083ea4dc8ac0159ee633ef660eb39bd5b22367ef4442d9424b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141272 Malicious code in cross-env-semantic-ui-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d430064a3f2838ee485b692085966c87a656a847987e105921afff07be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146173 Malicious code in phoebe-publish-gemini-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c346999cc24172ed14d568998d9240bf3ca1888626c6c643f1881bc8aba87b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146512 Malicious code in prettier-stylelint-nashira-start-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ebd32b4bf8b3a577c8241ab5654cc0cbfc3b39f81ee7cffe476b70f977a77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142138 Malicious code in equinox-wezen-mocha-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b388b88203e7d4b5e080a34626aeafadd905f86c6753c0ecce2002dac4dfcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149105 Malicious code in venus-centaurus-meteor-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e2a7081640c6d00cd3721b0816361c409eb82efad2b5cdab73e585d1ee971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149815 Malicious code in yildun-ganymede-puppeteer-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bfc9273c73ca300d2c28e83d74bcd02b2f30785e86e9bda858c5577c482307c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139538 Malicious code in aquarius-jwt-bulma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6563a0cc256be828325c533ef3b8a3fa946a92f767374fdfd71f591644edea79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140515 Malicious code in celeste-nebula-less-loader-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75d25e2d2359775fb7bfbd299dd722f19cdbb3c9ce481190d76ac8e4bc43d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139371 Malicious code in altair-umbriel-child-process-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c96004ef35148074e4c1f1adf0efbb7176c7ef4fb1b958d124c0ae97eb3479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145631 Malicious code in non-blocking-writable-soap-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d6bfa5c0d577f0ebf3c7294acf34cfeac91f1b22fb6b71b5864ec0edf86df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143233 Malicious code in helios-grus-morgan-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cf6eb17521dfa305a33e0990d686800f538681feeae23d261273fa6889f5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147015 Malicious code in radiant-local-magellan-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b008f7cc192e9f504f1506fd14fee85d7b274ba80d2a60521cffc7753559a0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143037 Malicious code in gridsome-dependencies-hugo-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cb118dfb512914757607f2581b601773b46370aa44eedf0fd97b506eeb430c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143553 Malicious code in impulse-rimraf-schema-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f086d7a0bdd974da91e3776911c36ba418c661bbf2f3d9fb1a50f0ca0daa4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...