MAL-2025-149067 Malicious code in ursa-phoebe-kaus-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69783bfba45e98d6a435b4c9cb6d5b9550e9c0d504d05dfb30783ac4cd3f6787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142630 Malicious code in fornax-link-framework-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad198d91229350f652e4ae102f70d8e7ce49ce27bdf04e26787e9a03c241f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149020 Malicious code in upgrade-miranda-protractor-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a111ac67a7016d75f014c72b9786ce5661bc1d1508fb5ac8b3dff5ed5eb70e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146352 Malicious code in polaris-karma-hermes-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f90b05b302362247d64cd0c5a11bb9f4ee4e063a4a21e562f0357cc4bc8716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139795 Malicious code in await-css-loader-neptune-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471b5799bdc0500202c4414d25c7709bc32363daf02d464476cc8a8bb3518ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143235 Malicious code in helios-impulse-meteor-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a30ebdf2d02c41b22077fb82b20683bbaf0a69357bc49bb96ea654f422a445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140990 Malicious code in commitlint-jovian-exec-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a83712f940d043472046dfe7c051ea32c09b485d15a401d1e980e1167464e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149283 Malicious code in wasat-cli-barnard-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6495e5dd212b62e122019aa03288e721c9ebc41f26fbc902e00502ce9f915a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149638 Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139835 Malicious code in axios-non-blocking-concurrently-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236a8064fcbd236de61389dc51da3fda74c28886d8ef01b3e97db6cc6af42cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140546 Malicious code in centaurus-kinetic-sirius-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50fcc30fa8139ed73af6f44bac4efde53a44deea5dd313e881996fb0bc85c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148749 Malicious code in tool-proxima-shelljs-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 700c548dddf10ca56e72c2b175f0ec0af8b18e39f9d0a0033c32499e6a5e8872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145367 Malicious code in neptune-mongoose-kastra-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43400e1607f9419af64ffd8712bb415e4aa32335781b992078ce9a22e64c58a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149812 Malicious code in yildun-dynamo-halley-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b626362eeed55bae9bb863aa98c40db9cfbabd1af02b8ffe4a9ffd65fed432a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140909 Malicious code in command-janus-xenos-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4326baae54946d0c93ca65ecacf8add96cb2a440dbb025b5308740cec8e138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142288 Malicious code in europa-protractor-readable-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa112931e43f24bbfdf4a2b84e975c5dc4fb7573e88503849b1ec74e6da0a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141625 Malicious code in development-mui-avior-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847441eefbf7f87609313b98589bff9e11ed701a7d8cef315a07e5b6dc2f7cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141705 Malicious code in dotenv-csv-jekyll-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f602ea5a4d3e70788dc52fbd3fcfd4afcd27d68f5d379ce7818d10fa011db3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149407 Malicious code in webpack-sirius-remark-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...