MAL-2025-147000 Malicious code in quito-phoebe-gemini-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a11779bb8f094c8776a654b9852e5b629a889123b47cace5c89f5a2a9065020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dione-cluster-hexo-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8497ec4c25a6c9e25ffa655c0a28de102cd03a2893bad483366653df906f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-express-draco-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130e2ad2be72b0c33bc8a00e331e47b3d7dc6ac9f9be3eb65feb42045e0ddd97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140848 Malicious code in colors-elektra-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36783a474b043cdb1e111f0a4ff2ec93bf162f4492ff990caa669c4b82dced6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144149 Malicious code in kaus-materialize-eridanus-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34083db92ffbd27d8e4a3df58007e7b9897495757cd1ef90383e6b19ca1a22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144355 Malicious code in levels-levels-ora-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4502d31e1f09441ce3987a7b5f54e91d5b3b26deb2544d135b60d2e3face816f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149604 Malicious code in xanadu-octans-rest-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b133c07f9f0f4feff669de21e38816ebc2fb81c0079455765ce01e12647c159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143232 Malicious code in helios-google-venus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdd3ca350cc2d89867e35e9712945365651243ee77bbb151092965b2539e17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-dorado-halley-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd77d58a1e5eb06d335b824c723bba81e37cef46ddefa88e94c9bd1ef938523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148349 Malicious code in subscription-apollo-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a045b40b3cf853afbaa7ab26e9964cb442500499698e1c895db995b6ca412f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145948 Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140960 Malicious code in commitlint-config-angular-cressida-nodejs-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51233a99373fbba970ffb051b6d35dfb5c790bf689ce0c29ae1c2bb9f36c160c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141843 Malicious code in dynamo-winston-less-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5865ce4555741b83e7e2292332e129b48064cdba03fd7b905da6b142e1f64b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145771 Malicious code in octans-hyperion-callback-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9bce75854fa458672be683b1b833a43e8d11c30a04fad9829b766196694d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140797 Malicious code in cli-ganymede-markdownlint-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f45a229869b86e2b0dfaa4ec720323de49cc23649bd8f85575228616c9843dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142754 Malicious code in gacrux-capella-nconf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dee520074e43f20c631e67eb9acfd0c743d02d0f0683e038630ae40bdb9b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144599 Malicious code in lynx-rollup-centaurus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591ec6229ab2705b8162f934c9e360700e809c8b16462a0ef13912f665240b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142732 Malicious code in fusion-flare-mensa-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cb283c5e1df3af407d2bf58256597fec083f923747006d84c54fb6f2b16d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...