MAL-2025-148894 Malicious code in ultra-gemini-elara-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1826034a534b444fe5c322a889eacae769fc5f1bc3335f37e8e0a0239945c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144536 Malicious code in loop-style-loader-webpack-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c401449ca2d854d6f789383555083c91f77978a2abd1a287fcc81f24166626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139225 Malicious code in aether-buffer-uglify-js-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6228be0503c0333dded0d4c2cf95ac4fb6da09d2639f6c0abe9020cb4ea23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141245 Malicious code in cressida-soap-atlas-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa32ebdf6c7a36c0fbaa79db2bb78384213d5a5f64c6f78fc4f2811bc97f85c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139614 Malicious code in astro-phoebe-meissa-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfc3ea1ff019850090bbd63cd756abc2536600f47a0f4c7286e87765eeb204e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146002 Malicious code in pavo-miranda-oberon-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e045e078de01e3ce8c9a68defd2bebe8212d9bf603e6dc9faa91cdda033f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144734 Malicious code in materialize-await-equinox-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b788c7f73eabc1f4be55768daabef3d611044ebbe93e7a4baf4947708b24a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147465 Malicious code in rocket-eclipse-stop-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4def9ff97a89fd4b0585a7027ccf43a81f2a3715dbcea1118fc5360345d78d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139613 Malicious code in astro-phenomic-yakutsk-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461199e72607e728901321d9c389e62b9c84c9d09c748e5bc6c8b32c0f881eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142144 Malicious code in eridanus-fusion-winston-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587ced6ac697af9ec92ae7d115159be34cab4fb8262d2544a3e74c01fa52f209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148221 Malicious code in sqlite-atlas-dynamo-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14187cef271cc4426484306893a6fee37db7948f0787533e5623a7551d59d9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144179 Malicious code in kinetic-nestjs-callback-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabb75f3cda79dfb4d37dd81312791d51764f7ebe791b33d5506fb7b9068b493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148500 Malicious code in telesto-readable-forever-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a42f9d68db37c59cb3b7fec781665652d4c469c2a608557b035bc57058412f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147733 Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141109 Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027c32eb0a3ba723ebe11ca4df1274d19f003ef78d0984d760230a9baaef860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142780 Malicious code in gacrux-publish-tailwindcss-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d37f5a3c4214caccf7c82701f651d7efb773236d74e1fff5946573dbc65889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140803 Malicious code in cli-magellan-farout-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b527d8b5b28588d0d184165346d2df487d983e0a39decd2a1b463d5211ca4e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141563 Malicious code in dependencies-changelog-cosmiconfig-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84d9ea7b954795a472da77c59e5779afe513ebabc579db3051c8ccb635e1150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139685 Malicious code in auriga-norma-test-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da79d86b866f3cc16959cbb6ce5270de1ace8196be287862f9fc39b06e0900dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143922 Malicious code in jest-epimetheus-kinetic-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddab619c8b30e6580d6e76848db0f867c37c639ed8a74cb0e28c233e735ad4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...