MAL-2025-145670 Malicious code in nova-umbriel-axios-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a48b5da8558a447c6380d7ad1dd3f14468d26f6806f41b77ccf389e6b1ab712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149609 Malicious code in xanadu-run-script-ceres-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139592 Malicious code in ariel-octans-csrf-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad782e8410ebf0acd6ca7e645af374b1c97296fe8279c828a59984a30eb1e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149067 Malicious code in ursa-phoebe-kaus-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69783bfba45e98d6a435b4c9cb6d5b9550e9c0d504d05dfb30783ac4cd3f6787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148080 Malicious code in solis-node-config-antares-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2c8da07ae20da8b6e8ebb222294ddec9a48db903489a63c5a274d038252f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143046 Malicious code in gridsome-library-jsonp-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc5c16176702b84773f164a05dec951742e942a5f7b658af063f0cc6480aa19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141625 Malicious code in development-mui-avior-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847441eefbf7f87609313b98589bff9e11ed701a7d8cef315a07e5b6dc2f7cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147389 Malicious code in restart-procyon-apollo-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42e3571477042a427ea800803cc8cce7743f22a2f72d8c43432ac8fd4a5c96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142673 Malicious code in foundation-sync-jwt-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763efc2d7e662922249fb41abf295d83acb6a6eeaac78e28e2930207857b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149638 Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143929 Malicious code in jest-meteor-centaurus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbacca549b788fec5ad0c9e1142e7c3f46b32be1fe505973ced9b749179f29b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146985 Malicious code in query-wezen-ophiuchus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963978e738e91b8096361f2d0993dbf63b1c2007be9bf4deedfdc91631600f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148901 Malicious code in ultra-nightwatch-commitizen-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba7ef101351f596629e0364d0b2222171328d574d9ce623ad8780380fb406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142630 Malicious code in fornax-link-framework-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad198d91229350f652e4ae102f70d8e7ce49ce27bdf04e26787e9a03c241f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140567 Malicious code in ceres-helmet-wezen-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf466b18144d7948c134657b443b0a30c97b236683cb3ce5a18e23c2157c857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142735 Malicious code in fusion-indus-atlas-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe29767c5b6d5ab886cefe4d1c91bde80862347523e6d222ef5f2302785b50af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144260 Malicious code in leda-cassini-wasat-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe536149b5984d6f38d2e057ecb9354817629b3760fd434a34a929598c89dc01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145961 Malicious code in parcel-karma-remark-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b675f3b0e242eb28c37eff42047754b0b896cbd5ec4452299033902d1bc3b9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144656 Malicious code in magellan-playwright-sirius-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b45bedbf93ddf35569e377ee843b9f2657b598f470050b225b0d8b52c953834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145347 Malicious code in nebula-meissa-shelljs-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb81e90c76d751feb2f2117f1826265a6d23d702d9560c78ad944dd9b7a17ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...