MAL-2025-139985 Malicious code in betelgeuse-jovian-galaxy-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67727dee8263d1af9289ae9af3406434cdc8e3f776477f2db173ff1b55c525d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147615 Malicious code in sagitta-registry-andromeda-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e537ce0a5cc5e46f30d717f43d4ff0980a85f8ad7d038de681d111fae1a26a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140272 Malicious code in cache-halley-ini-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0009d5a72a5b89144c27e840976ebd4456b421dd9a9c200dbb23fd1e7d40ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140843 Malicious code in colors-cors-slidev-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7b7d21c5d587f3e9a9bb72b1347fd39d95b97c318ed5cf5b7303f5a8c3f880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146326 Malicious code in polaris-betelgeuse-html-webpack-plugin-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d019ca346c566d05986b11fd678198d3a7f42e5ef2de48fd52d62dc516a8c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140708 Malicious code in chariklo-quark-inquirer-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e18b37ef21aabc03634e4ae2402cf0b55df19468c904ed07fe6aafffece329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146586 Malicious code in procyon-docusaurus-leda-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae77067a79c5e78098947e77b61b6c2682f730052878dde22a77c5e0b34097cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144459 Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139281 Malicious code in aldebaran-heka-prompts-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a9d30a248a0ce5bc126e8ea78788d311583bf80be7d9efdd06c8fb196c500d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142705 Malicious code in frontend-jekyll-commitizen-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e3259b503d88674f19a0c0a8474a3cf39ac6c21ea4606c82ba85b144e55d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148437 Malicious code in sync-yaml-elara-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea9f1b94089377fb6cbeb5040baccbf4222db8e33dab625fa7aafd9a8798f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140456 Malicious code in cassini-antares-zenobia-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae175ab6d944e9cf9204c7d27941811023acf0a0b69313e5511b013600b7cb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147675 Malicious code in sass-loader-meissa-pino-pretty-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a246180b1e7c49c62f2f18f439a38315a0f41c7affafa8418bbc4b48d1a8f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147140 Malicious code in regulus-atlas-passport-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5c316ba24ee4bf53cfaa8ce2c315076b48305c248711325116375ce2d8cdf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144530 Malicious code in loop-ophiuchus-fetch-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0506250f20544e8ea50d856e84eda191a6177d7846e809be15c6038a85dde340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145756 Malicious code in oberon-sass-loader-supervisor-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7b1e210facbd36613bd9c96454dd87c2f4600da4d05b499d8cd657036675a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147277 Malicious code in repository-orbit-scripts-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77143559d13fe2d5805ab64cc22bf717f4cbbee31e77b3c0b72bbe442dce8d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145573 Malicious code in nodejs-pegasus-rehype-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0ea20bfda57114b13227d54b4867638669a04fc1721663633af6db03bf082f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143713 Malicious code in iota-canopus-loopback-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4017d639d7ddeac9ee44aa2eeaa32adcdf3d9a98214a28fde276ae47c03edac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144598 Malicious code in lynx-parcel-telesto-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a81e296bc597462543d7c7356b81d22d0bd5ba481700455ce5e90096884655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...