MAL-2025-144579 Malicious code in luna-query-hyperion-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6142e23ee5ab164fc5622f93b19756207d75ddf3f601955b5f9f00d999c2c42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145501 Malicious code in node-config-antares-wasat-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17793dd4545a736114649086e593003aa80ac3a044ccfcefbf148d2d89f9a323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144885 Malicious code in metalsmith-octans-update-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4291d1a26c48c6ab0fa71474f7d1d7ba0447d623c90bbc2eeb32dbbb4ef370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144252 Malicious code in lacerta-ursa-process-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108481acf0733a6dcfa4494b50cff9fd397842b2c03148422adf1b8d22d76315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146388 Malicious code in postcss-google-prompts-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e3cebc126d02237fd746fc3461146e32650856c04c1abdad20a0015402fb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141964 Malicious code in element-ui-charon-juno-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc55b9ee51dffe3585c855ea526d5c0021a493b8f3118d417c5da181aa1fd42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149771 Malicious code in yakutsk-init-neptune-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a512de47dacac8b7e10ad032e5bdb245b16bd64d64ebf701bbd3adf8efbc71c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140456 Malicious code in cassini-antares-zenobia-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae175ab6d944e9cf9204c7d27941811023acf0a0b69313e5511b013600b7cb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145105 Malicious code in module-grunt-async-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1620c42d6b9a3626d387266ad5905f22353fd99815e09bc9822177cf2e95d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146107 Malicious code in perseus-procyon-helmet-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0704d4e192cf4d42193c7b8db4484f4d13f416e37a0dd024afa08df4ee3a6d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140195 Malicious code in build-unuk-uglify-js-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b7151233cdb9ba8fac2fc89070d32d847bc28c6e628851f6fa934f6b3ebefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144929 Malicious code in meteor-readable-norma-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb19a6b6f3257cbf23fa4c3e5f704404b50b398684ae6901bbfae055b308a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140070 Malicious code in bootes-algol-promise-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7ecd24d6f9ae1c5ca13e4b17049e81ec3ef27ba44ce68a71635520d7ca1611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143299 Malicious code in hermes-antd-local-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86117e77ffd0d2762aba9be413ca8dd9a6ae20efcac1e83cd70d63b05b6ab7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147997 Malicious code in slides-supervisor-apollo-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1595e06feea81377f062048d00a5c9f0a522ec6bd4fd8422ee3423902b77b5b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148612 Malicious code in tethys-canopus-altair-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720f562573581774561c4c0e0a5968eae5270291c8a7d4809e40a194989869cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145525 Malicious code in node-config-xerxes-cz-conventional-changelog-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a180942ad1f57fa83e02920ed2f76bca1b885d147b191824a218655b701dd4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146586 Malicious code in procyon-docusaurus-leda-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae77067a79c5e78098947e77b61b6c2682f730052878dde22a77c5e0b34097cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149735 Malicious code in xml-start-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91eedc1264661a331bb5bda407d0b16cf6ff42036d0c67981b64050be0744e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143849 Malicious code in jasmine-dione-antares-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8eb24375a86ddb152593c2601b25c78fb8d04c3eb3a1ff03cf84d53233ccbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...