MAL-2025-141220 Malicious code in cosmos-sirius-elektra-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 142855f368ae9311f0496c0eb37fc7d3e2721262d32ec4861a9a15af7ce9a823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145324 Malicious code in nconf-postcss-loader-gatsby-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a97ab5ec9166bbc220c9771d8d876188feaae7f798661cac66a8179005508ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139560 Malicious code in aquarius-webpack-apollo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa3d71e1d7a0e15bb88b0ed383e56df383ddcdda804b23c3df1115b266cab90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144786 Malicious code in meissa-achernar-betelgeuse-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4877db2ed8b3a12adcd2fcfb33130f202ce33e00f7138d0c8016693af1e6256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146591 Malicious code in procyon-envconfig-readable-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6697fea7d29b65951aa52d6a9e51701f0dd3f5832e77e69d3997f6e525d28ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146722 Malicious code in proxima-luna-janus-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3485ed97ed5ee07ccb23c5e647638790ba3d17b125c77e378bdc54f224def390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145260 Malicious code in mysql-pegasus-restart-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7009905cb8f53560de954853c4d20a219c322493bc7f7bc00c89373ad493a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144810 Malicious code in meissa-ini-zenith-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89373e197799912a2bb2392da8e17d048f550b9e4c9d2d61fd6d0a6643a328c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149505 Malicious code in winston-link-sedna-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f85cafa20aa12c12ac18d6450f990058652fe350caf2047392be8836ab59383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148599 Malicious code in testcafe-ophiuchus-xo-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21214842cd4cf23c4aed99f5eb4277c186325847a0fc2aab7e2c03f867aecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149178 Malicious code in vortex-antares-axios-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496fdcd645392ce1ce737d33cd2884aa6941d8a60e4abc6055eabb6cb9fb6e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148530 Malicious code in terser-meteor-element-ui-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41505bb8f06c3abba6713e2918cde0849952204503e238e0d3620e4f58c5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143046 Malicious code in gridsome-library-jsonp-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc5c16176702b84773f164a05dec951742e942a5f7b658af063f0cc6480aa19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139422 Malicious code in antares-mysql-gacrux-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edba824e6fe768f08d584a55a0dd42859273e51438ddde244b1179c175b38396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144656 Malicious code in magellan-playwright-sirius-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b45bedbf93ddf35569e377ee843b9f2657b598f470050b225b0d8b52c953834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141825 Malicious code in dynamo-docusaurus-iota-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601da33a7c94325665c58104eee0e56a78539f7d9cc24487209dc90c3391df2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144799 Malicious code in meissa-chakra-ui-mensa-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c41dcb2039948b5b1d3b95f09151efa9edd50c427aa1fcc052a6de060068f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143812 Malicious code in janus-grunt-gatsby-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a924f0426ddf06b8ef2466546109dd481e0454ec09d04bba7947208e692a7a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148002 Malicious code in slidev-convict-heka-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e873458060196c11220fa6c0f0f376108963d72dc0968b8880d89d1c286153a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...