MAL-2025-146891 Malicious code in pyxis-thuban-configstore-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c313ddd34e28e09d2c6edd5fd809ad33e9dc86d5583a6b1a050c1f208727106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145878 Malicious code in ora-bellatrix-global-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c53213ed86344c710c0b8992fd454b6e99b2e0e6e47dd5aee0188e2e45bd059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141925 Malicious code in electron-pegasus-perseus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671af7da2ae010d3996821b6cebc6aeeebef5043d6a5c62b3fe0d51ba287aa07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144308 Malicious code in less-cors-bootstrap-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a625b4f86ac38833ce2bcd8b9b3317525645addade1fd9703904c39a78828bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139778 Malicious code in avior-ophiuchus-achernar-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8afd34c176b61d18d2d2a77dba4d88f6eb6df7acf0d470be7dc7463628e0a0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146108 Malicious code in perseus-procyon-hugo-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cbc891ef57a039f013ea6cf1f8543491dfaf10476bd98ffc8f915a00739772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139182 Malicious code in acamar-perseus-leda-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c01d851b7518dc08365875d2faf898162379eab5f57f890791a44de7fab39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142306 Malicious code in event-backend-bellatrix-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5595b1d4ec3c6ec493010da0a65ce1110cccaa8064745ea9cb362a6791bd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145071 Malicious code in mocha-commitlint-enif-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7e9e5034c33ac7fdb51b5ba408e5fca69992dde96949b71cc5cae885249096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147103 Malicious code in redis-ignite-browserify-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2bcb87af9613293a5dabac5993fa0666d2694baefe4248018f08359fddeba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140944 Malicious code in commitizen-style-loader-ursa-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2ebc38705a078126552608b320280b5a60874c5f00b2dc23be6eef2c6a79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144399 Malicious code in link-babel-rehype-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e06c6128285df382318c7cbfc0ab35b0ede2d70825130103f6a655c3d8ab296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144681 Malicious code in markdown-bunyan-sass-loader-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75ba6abae34bf7fff5d43af7c07946d458f794e386d3f8dccc26010f8bfd47a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141008 Malicious code in concurrently-koa-jupiter-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c406a48340215dfc297931ea310432a4f8af4887c0ac52bb24dc2a6d0c56388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144569 Malicious code in loopback-uninstall-europa-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4244f6505f7c45e72bf30aca99770c0cc5832f3159ed307e19d993b30c5af9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141427 Malicious code in cz-conventional-changelog-private-superagent-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca679e5bef873726be141435454053c2303e09ba8a82603c7836e0ae50b98986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horizontal_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc79bcb5a81f82f8ed7c71ef14f19bf018e96b359898de248338dc73e1d6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67a523c8300a06ad1b671247a199d7007231d224f410652f4ef2fd53da260af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inclined-black-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2705f85a0fcd905ce8ec3ebbe31f26515bd3c273b66f274be5b8879b3bfde44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...