MAL-2025-144578 Malicious code in luna-phoebe-despina-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecff078b7d6ee9dbb72b33f4db4f7635fa8887e98b1db63f8fcaab39c219a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144145 Malicious code in kaus-hapi-css-loader-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e3895c78a71fd2ea5e6ab9db681efe43891f8ab1c3ea3f392a530f981768a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146108 Malicious code in perseus-procyon-hugo-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cbc891ef57a039f013ea6cf1f8543491dfaf10476bd98ffc8f915a00739772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144308 Malicious code in less-cors-bootstrap-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a625b4f86ac38833ce2bcd8b9b3317525645addade1fd9703904c39a78828bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139321 Malicious code in alphard-eclipse-deneb-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669350bcf59eb37c221ae4778203358027c54bfef1008f0df4c38b211cf9331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144300 Malicious code in leda-vega-forever-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705ba1bffe46a977d02c92d5251392b47fa800e7294432d8f3f44f3f5c584c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140475 Malicious code in cassini-repository-miranda-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9994289f1b06224486a425bfaa67a7547e6b44511dfb090b75b18603974c835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141512 Malicious code in delphinus-auriga-helios-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bce6aef65b047690f12ec284b604cd35af45717c4af859051fd00bb4939858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146019 Malicious code in pegasus-callback-build-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa451bc61732e3800480939f0e2c59aacea12ed0549347ad33424411dbe39b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149106 Malicious code in venus-deimos-public-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d0d778c8df669fba403d905c69e073ea9e7cb886541e7d250b5deeda1742b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149055 Malicious code in ursa-electron-builder-helmet-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dab14f9c372453cd1539810554a152dbae1521576f8135bd17dbf90b01ab50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144642 Malicious code in magellan-jupiter-jupiter-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5465d37e629fd147f904430a0ecbe14bd1ac0e835f9c833515fdc170327c89fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141825 Malicious code in dynamo-docusaurus-iota-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601da33a7c94325665c58104eee0e56a78539f7d9cc24487209dc90c3391df2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147103 Malicious code in redis-ignite-browserify-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2bcb87af9613293a5dabac5993fa0666d2694baefe4248018f08359fddeba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139437 Malicious code in antares-sagitta-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd83427e56df88a4c28b00a435090b1a952c4b1b7a52f9c58f18630af7a3621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142596 Malicious code in fork-run-script-json-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a487508b75acecea952348bb04e9172b5b203a5e9a7c982696c74b83d7457b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139820 Malicious code in axios-canopus-kronos-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ade41d63c7f9d1622391ff19a184cc9d7b30bf4422aa034da1f374435842c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148860 Malicious code in typeorm-typeorm-development-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f3f51d085b23b028fb1c66c2191341c860e04f3b386fc93fc4f4c4db87ed1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145977 Malicious code in passport-barnard-server-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61fcf20659588f41f80abb03c011da01e1bf19d78058387446b81977e811089d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140944 Malicious code in commitizen-style-loader-ursa-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2ebc38705a078126552608b320280b5a60874c5f00b2dc23be6eef2c6a79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...