MAL-2025-141861 Malicious code in eclipse-zephyr-meteor-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25f08d85561a4f9320ecd3fcb6e97c39ffd13e80b8acf7711b6112b0a8eabab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148460 Malicious code in taurus-ariel-zenobia-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bff887919eed00708f4bd099ec6d4bc2bbaaca712b700c892b5cd91641d159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142938 Malicious code in global-hyperion-grunt-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c54953e6183bef1a92e3bf728ae20f23fa438ae368166505a8442364fbdcdc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142143 Malicious code in eridanus-enif-magellan-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331943ffdd59f01e95a50e5636e55548545e02516da2eb72c82b493f12e8a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145945 Malicious code in package-scorpius-kastra-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13206989ca281bd8486109bca034dcd43687f4928eaf2c88002dbd6dcc613c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146976 Malicious code in query-release-it-pulsar-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9d68133cc11dd8c7ad4eb57b193d34b5c67018ac38ae8f791739da62bed77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147717 Malicious code in scorpius-thuban-algol-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172742d80e37714777ceda6aa00d46d9e5c6c0f16d5f31980d3bde53a76abd44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140869 Malicious code in comet-callback-eridanus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27b1c7def9475e1e33a54a044eaae4b46a02eb381b65fd15acf6fffb661227f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144832 Malicious code in meissa-semantic-ui-javascript-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b22af8d1e581000784e2dabcaa9430a24b2c5e18069e1425b09bb18d86a7206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144407 Malicious code in link-got-weywot-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75bd7b215496fa678437cacf6b90f5388e6db1775a5f0054b9ad223f441689ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143881 Malicious code in javascript-loglevel-chalk-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33bbaed4ef778c8d54389e0792e928be4ed1d75e382fb7d9b775e0e5dc58697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147574 Malicious code in sadr-process-ini-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e99699493d67b9e69638403e5ff42e8bcb51dde5d15221340e4921f8cdf49a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140483 Malicious code in castor-cypress-figures-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d75653f62b87ec0e21de68334b11a2163da7ee5b1caee696ad96d9e1d7b81d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140638 Malicious code in chalk-ganymede-dependencies-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033aef59b2ea1fb6885746d7c1267fd80de8d5345fe61cf6527714572eb2d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141472 Malicious code in dagda-hydra-centaurus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148539 Malicious code in terser-test-unuk-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace42a4c3e8b7268c7fa20d143fba3393fe9fd70a9bad5324be5916b4c15d85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141380 Malicious code in cygnus-standard-apollo-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d60ec031b81ffb48378ce94a8bb54350c86dbabe71fe1e95d3463ef3400d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147060 Malicious code in react-bootstrap-hapi-init-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a589dd8251f7b312b8b946a84cf1993ef7cfbe4e05c8ccb269fd98890e23d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144196 Malicious code in koa-module-bootstrap-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a4cb222471bc51975749e78a4951f374ebdaaf33f053ab57fbcd73c4c00e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146478 Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1a8c727ac3b13bfebcaf88f918fb328f6db6db6c868976d5d5db78df819ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...