MAL-2025-142145 Malicious code in eridanus-ganymede-hugo-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8dd49354124306d6cce53a0e2081438a175d153f93a53913c5eb90407d1ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145339 Malicious code in nebula-dactyl-meissa-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fadf6c26d618a6dc56352d25d762925947927db5f5ea0134c63e3dbdf0bb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-html-webpack-plugin-convict-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a7c905e6d297a266e003ada74f2dd7959d66a6bba0eb74d4c082c443e0fdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149271 Malicious code in warp-kastra-upgrade-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5fc845cd12256e7a513ddb060ed7d94cd1018470e15f449b1637638276e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143799 Malicious code in janus-aquarius-perseus-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b3084860f2cb8217adf7746c16acd98753704e6c2ba7267ba93cab716f9bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145383 Malicious code in neptune-test-jest-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad12d88a9ef4fa5d1ba411a5bbf157a43c53931bf1c5eca24e0a51a56eb7b65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143225 Malicious code in helios-algol-norma-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fd6e85b9e1976f017059caf3a99dfac7420a381fbf45cc11c46863a194d26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145643 Malicious code in norma-html-webpack-plugin-version-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84509b5d35b1df7faaa56be4c99f921048932e5586fbdebf4d72f7c87eb39467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143708 Malicious code in io-version-spinner-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcca631af9bd1225bc2295e4972bb17157ec73006cf5109fdfcbc42aad6da17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142868 Malicious code in geckodriver-jabbah-ignite-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4507051c332a729b6cc8aa5e646269609ee1d1a86c0e98c10de96f5fb7770530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140731 Malicious code in charon-puppeteer-eclipse-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4dd5f4eabd9a3a7dbdd1b6c3808038d29ae76d949ae2e15e50502ade7eed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140456 Malicious code in cassini-antares-zenobia-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae175ab6d944e9cf9204c7d27941811023acf0a0b69313e5511b013600b7cb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139281 Malicious code in aldebaran-heka-prompts-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a9d30a248a0ce5bc126e8ea78788d311583bf80be7d9efdd06c8fb196c500d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148531 Malicious code in terser-nestjs-deneb-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faed8ceafb424f803065b2bc376f7e367d1e2278d4c405f8cd241aee76e9dac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143550 Malicious code in impulse-pino-eridanus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8168435c54621630cc4dc2b62e83d9bc97325824d39293359dd328c3af275f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145558 Malicious code in nodejs-cosmiconfig-mysql-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d0654beb1de2166c90609ad1eeed5e8ee76eb4848ea427be5b23c211714a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145648 Malicious code in norma-registry-async-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13eb62efdc128819d4e6c73446ceb745d539c8ef9c8e3debdd1972bf6210cd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147328 Malicious code in resolvers-json-spectron-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786bd9bd9011a5a9ed2776957a9967d5e46fcb7499fc2695fcb8bc16f9045b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146278 Malicious code in playwright-cosmiconfig-helios-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94faccf8d1e9ca5e1a718511c8268e6b1d53423b9e88f4b6377418a666871e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147688 Malicious code in schema-arcturus-relay-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf17e4c24c9b9e673c663e399ede376f3d5a92e1c679fb3908cadf2fa7bdf2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...