MAL-2025-140508 Malicious code in celeste-hexo-auth-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d92c21a1b1e16f7cee7c32f463513296b72f874f3dc1d5be0b833a8f10432a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141257 Malicious code in cross-env-hydra-vega-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e75583628fc05638cf1ada99aca1c3b242199b18927ffd6aaa09110231c3784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143499 Malicious code in hyperion-sedna-umbra-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b9009f151a521eec1da0eb97632ce95d3433ba6e5c443a04f0c827bc181730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148683 Malicious code in titan-markdown-oauth-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b3aebdea90601592663add6a87ada63bdcf39787421dd0f0ae1f71b1ec02f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143241 Malicious code in helios-uglify-js-nextjs-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6948ab4c43a4459026e7fab984c2823c9512f7a3204cc4437e5d1a651020ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147899 Malicious code in server-framework-andromeda-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bf77a21aa60073ee5c5f6339fcbd7faac1ac57a81404777827d4cd1dd5a0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148186 Malicious code in spinner-build-castor-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421b20dd487b367106ab1d674e21d45f7c7271a8b88f3ca452f9b4850cb33f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140004 Malicious code in betelgeuse-scorpius-postcss-loader-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427e7143da6bb276367048b0c5b5503a017feeaf6621d126c4520ebf2085c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148876 Malicious code in uglify-js-nuxtjs-karma-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a66eca8cde6088bdf27e856c1034c60a3cd001c11c8f07bcc814afb5fc46e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144121 Malicious code in karma-taurus-browserify-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 232bd8b8068a1ff13d4b4659cb36d3a3e4198a36dfc4c886d84bdf7445daa6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144653 Malicious code in magellan-mongodb-fornax-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70598d3f2d4714da0773553f94b820f5a8c58a903b861bd575151ebcd7b0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149663 Malicious code in xenon-subscription-configstore-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb66ff1c012081cd21030b4d61b73c3dc1b262d6a90182478c8a1d2c7813b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146263 Malicious code in pipe-jabbah-prettier-stylelint-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c51329d43e43655bbdb59a03c24e3aa44dff574c959f7d88755860d0c77f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149455 Malicious code in wezen-framework-dotenv-safe-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87602dc7c2a6edae48bfb5c94901e8a70ec0be68891fd9a43a379fc6da8d7a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142804 Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140473 Malicious code in cassini-optimize-css-assets-webpack-plugin-callback-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4d26d4873796782551905789c7fd81ed92473600d7d9e682e8a4f349c24e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139697 Malicious code in aurora-chai-csrf-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e4dc3022282cffa8ced96920d3d0caeb5bb7cc58760e52b23ba6bf5e3742c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149899 Malicious code in zephyr-yildun-docusaurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400b1598db4b5a863e70c4e4eb420101eaa2ffc4863cbfa4bc809a637b75f3e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142916 Malicious code in gemini-rest-framework-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08837658c072ebfa61c447e87f20d110d1781a9926d49b77bebdbacffc5a0cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...