MAL-2025-145342 Malicious code in nebula-electron-relay-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5fe572a26cb12ea989b18242cbfc51386be972e2424a2d2223b5bbd8d58ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142143 Malicious code in eridanus-enif-magellan-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331943ffdd59f01e95a50e5636e55548545e02516da2eb72c82b493f12e8a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147790 Malicious code in sedna-regulus-iota-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b8ec49fe6c4fab613bdf976a420affd1bf19ba986d1757efa996391dabf75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148201 Malicious code in spinner-lint-oberon-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb5f10b98c034f321b49c07fc5d61801eac50c647785c8f2ff987b77cfc76f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142855 Malicious code in gatsby-yonder-polaris-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691b0ef996eb6991d3b134c40d40b4d6f52350fe5f6d04289c9efe2b264e58dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142233 Malicious code in eslint-plugin-ignite-carina-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d58af40063be0cd212eab0096cb411052d426f2505714f8cdd21598a657b746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148529 Malicious code in terser-meissa-kaus-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eca9100d0d234f4e9de5100fe27255c387d9e90e576451cc687932b4771b9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143011 Malicious code in graphql-umbriel-enceladus-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95df253aa63bcd8287944401dcbc32701f552deeffcf87cb251266f1c84051c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147717 Malicious code in scorpius-thuban-algol-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172742d80e37714777ceda6aa00d46d9e5c6c0f16d5f31980d3bde53a76abd44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147394 Malicious code in restart-quark-fusion-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c631713ec6fefd9d7cdb0891872d6a826be32ad71a4c25f3a8e2c3d9b5221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142938 Malicious code in global-hyperion-grunt-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c54953e6183bef1a92e3bf728ae20f23fa438ae368166505a8442364fbdcdc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148539 Malicious code in terser-test-unuk-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace42a4c3e8b7268c7fa20d143fba3393fe9fd70a9bad5324be5916b4c15d85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143113 Malicious code in gulp-celeste-celeste-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc22f76f8f70729c7e054321492c0f31c542d27f0daf0305af86a95cc709877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144366 Malicious code in levels-testcafe-janus-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97af31e68543696cde777fbc0eb7742a0249f4e154cf3aee95513c66fb233463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146943 Malicious code in quasar-cluster-deneb-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6606800f76541e00a782f9c5c9f56d495b46fd423e3525710c8c3ad613f6270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142628 Malicious code in fornax-izar-wasat-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fdcf71c58e12eb58143158465d0abbfb2a527538d82e6a1d0741aa5cccb300d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145750 Malicious code in oberon-parcel-titan-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9978bb4e3520033630c29d6f7bbdde1916546a107868e410565587642fa5b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149871 Malicious code in zenobia-redis-inquirer-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62577692ad5350d3327022ce9fd34ed152f4a6dc7818c1977c932084039feb75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144497 Malicious code in local-run-script-ophiuchus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb8344fa0bf708a5d389890c5264e3d60bb553c221469e2dcda9bf9d1a03281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146687 Malicious code in protractor-hyperion-soap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc172a6e98714542897ff86e8b096def8bd773c0f7a8b2d9a6dde31dba23d298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...