MAL-2025-147793 Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21acb639bbf2efdb260ea223c2b12d93b35a5e8077ec424222d65f38559509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140660 Malicious code in chalk-wasat-juno-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe737cfc109d50d973a0bd7ef6bb85265322f12059957b9931ec6ecca31060d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144190 Malicious code in koa-development-nebula-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44bfe6f31e8ed996f1f924f50f0c5358b6063df84a2947fef4ebcf2eb5af7e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146886 Malicious code in pyxis-perseus-release-it-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b04e9c06a4cc4e95b2435dbd3567c0e5ee46522a071221fb8a3640bc33a207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143398 Malicious code in hugo-rimraf-eslint-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074c78f0a4fae1045293325cfb302d1b4d38bfcac2d5281d407656997d74453d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142442 Malicious code in fetch-europa-schema-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e0ac5335d8a14ceaa0793d3510ab30bee813f977061c362f79ae7b989ccd60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147640 Malicious code in sails-configstore-umbriel-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07c63636c7adf18d4ab98086313fd9f92d35fb37e9ec0982f061391b017a133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140244 Malicious code in bunyan-jest-barnard-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf484fb8927502be255e02a27f23deb90239512fb1c86a4f001ca21cb55810f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142622 Malicious code in fornax-grunt-zephyr-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5618c03ace1b7982597f2237ad3ce62c1e20dfc2b23419fe11450d9d6f70b7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140761 Malicious code in chromedriver-arcturus-pino-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7270b9ac19aad85ea7e97512b7bb3c2f8a2d344649d14905875aeec372a852e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140476 Malicious code in cassini-taurus-init-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e8e587d4ebb2912d2b71771a2c9697c9cc76f613e2ef8b99f1eaac82ebd142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145809 Malicious code in ophiuchus-carina-neptune-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2541788a9fe062b0b833bad4f4e10f6948f6cc5671e8a94dad7a20f97b530f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144839 Malicious code in meissa-wolf-server-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415cc67a74743d56b584974cbe4bdd788fd9b44edea0c49f73e87804b457687f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142033 Malicious code in enceladus-process-sqlite-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9273611d6fcd1c1d08fe8e868a72e5bb8227c46876500e01a1ec3d3839c7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144560 Malicious code in loopback-puppeteer-orbit-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb39e2620d3390231bb1f11d856b5d83153e0517c509f97d497defe7de83a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140352 Malicious code in callisto-spectron-hercules-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca33da93f9706b4fb0fd6adcd6d5af1ddc5f4907d08d945aef36bb5834e103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147365 Malicious code in rest-sagitta-subscription-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76feec4c0ec22af6d32cf9249d74d286f41c8961ed3538c6a0a07fc6c71de1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148069 Malicious code in solis-axios-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c542a316027601cfd1a2e4848c0470b840fdc8f4c4141d638e1338d48a22d8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139888 Malicious code in backend-hercules-janus-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546044f30a3c8d955fe920282e9d5666f3751d680bafd4e63c08e0bbda5b156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147073 Malicious code in react-bootstrap-rocket-async-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6eed4998bf00e59d674933b76fbf9a1a5c4a158d6c5f0892cc4c658ac9d96f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...