MAL-2025-144862 Malicious code in mensa-readable-nuxtjs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996539962812e89f55620996e24305e3dcbcd5363dcbbfa86f32540a8183ba45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148044 Malicious code in socketio-adonis-neptune-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 484f9aea0b2d04d78ad63170c4bab6e3793f130f703de8994eb4e1126b274e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140337 Malicious code in callisto-jwt-fomalhaut-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d4edd29a5213c358777f85632ba1fcf13f6e4e6bbdbeed1c260ff2b3425120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139780 Malicious code in avior-quantum-quito-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075ce8326864624245be5fb57fbf1901c47da14a12275f3443eda7cfc7e146ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140679 Malicious code in changelog-protractor-bunyan-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8d924d423f039c7a3fe6145082b38e7501a3ff931d7a0e79bce1d9b18c274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139605 Malicious code in astro-geckodriver-janus-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1a9ef40f2dc1f3f3e83e487e13afb347652dd20a7c8940dbb595234eb2acd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142468 Malicious code in figures-halley-cygnus-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bfdd47cd57e9ec30a9e0daefae6dced0d48b8bcdec9c70ebcd41b4bf6f3247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148869 Malicious code in uglify-js-child-process-meissa-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc65988c6ae687d8f277f021531cebb687422230da74bd8667df9a88f1f64b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143514 Malicious code in ignite-halley-jovian-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641352305dc2f90655fc051c707ae15f10e5b860427930d87e2b807717cc2ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149266 Malicious code in warp-comet-csrf-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95efdb76a77c45a47564e1fc7a242ae41eeaa72b4429cab3af068e68a2d8772a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147771 Malicious code in sedna-iota-levels-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744cabdb165808ad9bd58d5c3f7c698c27357476b3e8f2562f1598aeb2a9c57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139853 Malicious code in babel-development-jabbah-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4633fb1131d4ee30b5d86906777a04819c33d351f67befb19c8d6a18c2caace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146695 Malicious code in protractor-pm2-cosmiconfig-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b442cd6b7fe699a932768c2d49b7787c6c6819ff639e44e5280a215be7563f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141063 Malicious code in configstore-rollup-nconf-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b379eadc5701a4e95b8bc8f0981f9a92a62039f671a5531e6e5821e61350d4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145177 Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140045 Malicious code in blitz-fork-umbra-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ed6fff075c7c8191f5bb8ca9ceae5566724e352dfc03429d19a8afd34aefc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149276 Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146231 Malicious code in pino-pretty-comet-apollo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0fc55dc02578c07a1ca82888f7559c7f7490d510463dac842eddb8680878a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145449 Malicious code in nightmare-start-iota-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acdaa494b3ea3a94bef6251589986bbc15dbfefeb3734679f22bf2081462050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...