MAL-2025-146931 Malicious code in quark-oberon-cypress-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7a7a95f173567a7db152fdb4d4110a7c2c5b984a40dd6540fa15a585c04358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145670 Malicious code in nova-umbriel-axios-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a48b5da8558a447c6380d7ad1dd3f14468d26f6806f41b77ccf389e6b1ab712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139837 Malicious code in axios-protractor-loglevel-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d16a7033d42bdb4fbfafe22f856e5fb27e0364dea6cc4a01772b651a18961d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144596 Malicious code in lynx-node-sass-hermes-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b4cb8743405da734d4d184d2310cc39dc588330460456eb82aad066ff03c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139780 Malicious code in avior-quantum-quito-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075ce8326864624245be5fb57fbf1901c47da14a12275f3443eda7cfc7e146ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144881 Malicious code in metalsmith-jekyll-async-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae80eb5fe94ed880a1e30a8f4eca1187c053f73941d55412553cf556160de14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146369 Malicious code in polaris-spawn-ora-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b45b053fc5fef77986d950b3d91ce01a07e7dc930d068576f08521050eb7178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-xanthus-got-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75781e4fdfbf44aaa54bd56aabe7774674004a1a0f8c21d181238759f9a854f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140588 Malicious code in chai-dione-juno-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a951b77c82df55f7b3fe4649ffc992bbf0432bd91321308309ec19464d6e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145011 Malicious code in mira-janus-mongoose-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0171b3e4f13eb46e037d4896a616a9276aa90bacfb5cd5c1f5e85e1cc27fadda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148144 Malicious code in spectron-webdriver-uglify-js-figures-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8789b9b82d67312a6f4a4b617e59e05f8880864510defc0e5ca8981f30aa0dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144111 Malicious code in karma-hermes-supervisor-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ed3ef202182c8794d3913afa6b9880d212ad731b141c6a92437e1e35b1f213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139287 Malicious code in aldebaran-zenobia-package-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d5bb8a735237ea7373c3f507ac04632de6eb775b54c59acde7690da38a86ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140738 Malicious code in charon-ursa-ganymede-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427212e66c2c920494458df1e674de9f5ab3f1041f068f2312a5a6c8e028e01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139810 Malicious code in await-toml-jovian-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b222adda14ead7b9839d08868f98d647ceec8f002ac41332f05d91244bf774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-dependencies-janus-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d1191b9c0587f4ac87abc4b66593db335f11933cbe034825bd1227e61287ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-node-config-janus-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3953560bbf546385e3116d1295a495a96bf128ad40a003706fa0d5cb2c8a6d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-loglevel-hyperion-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07215dd570a9f1ba91bae4165f316f59f121eedcd225aef447a190551ca6cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-subscription-loopback-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54c829d1cdf9ebb1940334926787c7630f40138d85bc15a6a2c84dc88a385f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-miranda-nconf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdaeed21936afa676f6e018d202a8cd6da145ff70e6679d211180c50c08c4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...