MAL-2025-147600 Malicious code in sagitta-io-mutation-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371f55220e95098b087da7207d9ee1aad74ad9828791e58d89763a4c18cb07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139749 Malicious code in auth0-jsonp-promise-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb40a31cd11f675d3723d8b1395719704e6175d0de1759fa6ee4004879d0d6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148798 Malicious code in transport-procyon-enceladus-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38408bab8f56069e245b801cd598baa2c571264ba0f39e7e5d01640492a02709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147257 Malicious code in remark-venus-restart-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3326f88cef2bdfa35ca58e8d3f7ece379f1a199127012b9fe1a9672ae8089911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149508 Malicious code in winston-miranda-deimos-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6de0c14198fd929f6f9dd0fa13157940276fbe6fcb62c9dce5cb2a9209c05c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148860 Malicious code in typeorm-typeorm-development-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f3f51d085b23b028fb1c66c2191341c860e04f3b386fc93fc4f4c4db87ed1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141637 Malicious code in development-ursa-upgrade-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30680c255c5f3e7ecffae70aeefb414136fe73f579ae9000f512d779efa522f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139607 Malicious code in astro-got-spectron-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f999588a4cb52296bc68b50e588cdc7434b2f57827ce86ef72b7bf111b292cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141798 Malicious code in draco-wasat-miranda-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7854af127c6cde6e23a5aa64329b6e001b5ca79115617c855e6e263daf890134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141811 Malicious code in duplex-hyperion-arcturus-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b037a874f79cf6d1ee2fa384ac6fa8c11315b800a55c5ecfd7b9bc38dad0702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148661 Malicious code in thuban-postgres-sails-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f7468dd28a43df758284eed823c6994c99de69405aaccd16f7ec88096ee61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141010 Malicious code in concurrently-ophiuchus-cordelia-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e47618e5d0ca1380ac6b5315c5c9c7f14e7db876525828a16091163fa78518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147542 Malicious code in run-script-eclipse-library-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba95ca976be0c959429a9d1c12a3807c824cad259d8fec7ec0d2aa123e97b477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140053 Malicious code in blitz-oberon-ophiuchus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9506fb8af6e69d81cc9b390422e08b9924ca80b759806594dacfce64b3786012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146942 Malicious code in quasar-ceres-morgan-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed91d6160213e6418e42d9ce30aa2de88c7e6950e60c73e9220336485fb83438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139883 Malicious code in backend-configstore-ultra-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3f101f40a801f8e4c2f3629648799481e226d2d379a8ff859c31cc54d24cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149321 Malicious code in webdriver-manager-io-betelgeuse-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b7ad259d79486b5eec821e49788722b5bff497f8471dc329e58af138fda0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148843 Malicious code in typeorm-flare-fomalhaut-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25798a5d21cf8bf514ba263838d6f5650b41aa8b2e72e6e22c72dc364547e4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142467 Malicious code in figures-fusion-nextjs-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1463c83e9442351390e432473567d37b69c6d7f58d11c80760ebca55e7323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148229 Malicious code in sqlite-iota-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344171a165d0c3e2a68c971568f883679677b8f5082569c0d17202313d2518d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...