MAL-2025-145406 Malicious code in nestjs-webpack-passport-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3120d77982b49a74bb943a9a9759191fbfde37c742c6293bdc261cfe16a46a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143885 Malicious code in javascript-pegasus-chariklo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6997bd3466d1dbc0d2d8e506913bb83f681fd0e26386f1abe92ec640aecc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146892 Malicious code in pyxis-thuban-redis-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe69d2b2cf0e8724763b399bd63251ceec89ee464ac621facd41d7e590c4b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145364 Malicious code in neptune-html-webpack-plugin-subscription-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e435d5ecbefe668b14f4d630c7b7256485e109617f1a86837e61fec8b51824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141456 Malicious code in dactyl-titan-cz-conventional-changelog-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ebcbb6b401a4e9dcf5b69e8d8f3e68be1a9f58d56f30831dd47a44939695ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143466 Malicious code in hyperion-bellatrix-carina-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d1bdf4a11c0a392a600e12d08a06142d23cf402e33d975e8db903eb91dfa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139783 Malicious code in avior-rollup-stop-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edddc936cb28966c53e967414bf4652f3bff127a82fc2a0f7328beca98b0b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146887 Malicious code in pyxis-proxima-library-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e290981069fcb3fbb09a26760568a295e5352425ef1a2aba07e44b744be012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149898 Malicious code in zephyr-umbra-eleventy-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17faa8855d7ed0dd8bab2618bf7a645f24228a6533ac85cfe665cd7182c915a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139515 Malicious code in apollo-hapi-soap-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b11768cae9dce591b19f0b3aed2b0ce4d5df76c62962d608ab48fae2fe65d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147337 Malicious code in rest-adonis-framework-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdc97d6ec3057d62c70412d4694f39667435d58eb89479f96832d7ed4b1b46d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142404 Malicious code in farout-cz-conventional-changelog-loop-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32def6e54f295429be6ec6c01f65d319ae3db26c400298a888645b4981e893b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146988 Malicious code in quito-barnard-selenium-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d636fe8e5472750665c3549099e7c1323370a7f084de4ef5aee264377c304ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146632 Malicious code in promise-antares-nconf-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd959dc2b522874aeb0719f4d4696294100ae6b64786ba500b999a1acd864330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139330 Malicious code in alphard-mongoose-ursa-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141645 Malicious code in dione-leda-meissa-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdd7424b138fa68f71572d8066f481860e9136ef3c9711080a68be656b53719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149095 Malicious code in vega-nebula-gacrux-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8bd7530893d5854b41bd965fb6d3202ceea9182089534bf2d30a05ba208c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143006 Malicious code in graphql-orbit-csrf-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947709eb4c67dddd2c3beb0b9c8b47c7a310dfddfda1f9499574825d9538b59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145651 Malicious code in norma-supervisor-epimetheus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21559884472e9184dddd2e9706cb4f381d1a1b893b88c58be5f19663ce99356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...