MAL-2025-142033 Malicious code in enceladus-process-sqlite-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9273611d6fcd1c1d08fe8e868a72e5bb8227c46876500e01a1ec3d3839c7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140561 Malicious code in ceres-dependencies-restart-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84afbb88c014567ce635de5bd2f5f6ef18ad0d1ea7dc744aeab38c3484ada01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147909 Malicious code in shelljs-bootes-regulus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea1d60a341ee060fd308c857d380e387103b67657fcb6ba02d846cc3f73d1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149686 Malicious code in xenos-octans-bellatrix-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fcbafc3bebf2ed9ba8a5cded8eb911df8c059d996f37c770dd5ab22e1e4ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144674 Malicious code in magellan-webdriverio-shelljs-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe19c56bd6f39887588286da4810ff134f86ff606f2b2f0b78472dfcdaacc39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143485 Malicious code in hyperion-markdown-pdf-janus-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d4e1b0851cea8515c564e889b68650b0cd90bd44082828b01a23f152132fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144190 Malicious code in koa-development-nebula-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44bfe6f31e8ed996f1f924f50f0c5358b6063df84a2947fef4ebcf2eb5af7e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142115 Malicious code in equinox-acamar-ora-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79491fe41ca22980491277a8cb5b34e805fddf15f0319d9c1ec3bd5090dc91e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140882 Malicious code in comet-mutation-hydra-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf23dea65fac62655d4797e17e72c4af1c8440834c87f6901137f94fba8bf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148626 Malicious code in tethys-nova-changelog-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91cd76444f1127ad2a02cdb347e60a363ca07cf1a9ab39ddef4716deb7014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149076 Malicious code in ursa-spawn-writable-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98529c833cbb87e017a27e085a759a2b5c2daa8f6c81183a5d835f87821f4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145554 Malicious code in node-sass-sequelize-init-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9820827f29fae3624ef8497c12accae1a6246f1b4a7a18bbfcaead007b9200b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142622 Malicious code in fornax-grunt-zephyr-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5618c03ace1b7982597f2237ad3ce62c1e20dfc2b23419fe11450d9d6f70b7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141064 Malicious code in configstore-semantic-ui-iota-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522661629c144c726922f88e7442ab71fcbffc91daa5a123695bf5248c25ebed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149810 Malicious code in yildun-config-electron-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3075d940b4cb7305a807b21108734d5b68f8e26426628454d4345e25a3851c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148663 Malicious code in thuban-rollup-plugin-chariklo-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc146fbdfc420e6edf55add804abf5db01e4546ae4b3d20978b40a12d156f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146618 Malicious code in procyon-test-dactyl-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa92a6112015e2ca4da64b0b94ae2b75baf7c651a407943d4d21741a0f4a71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141976 Malicious code in element-ui-nextjs-charon-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf1870bf9d264375464e548d8535ac54a699ad95615e37cc390f8af9a2ec280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145466 Malicious code in nightwatch-figures-postcss-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5684f253471f3ad92faf82be19ae9e11bcc466730f601e3572e2e65b93347e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146833 Malicious code in pulsar-html-webpack-plugin-yaml-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de284ef22c3d79d0eb08d849bacc79b6b331418af35f35cdf63627b30baba057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...