MAL-2025-149054 Malicious code in ursa-dotenv-safe-nconf-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6467b9bf9305267e3f19b3326675b76c09277824481b4e1fca8df8bed48f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142416 Malicious code in farout-ini-spectron-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b6b0a4b0fdd2e3265a8bbf727271ebccce0211e139ed87d81e9d6beb63ca5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142180 Malicious code in eris-prompts-aurora-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11be7b2ecaf34df0c32fbae745c6c3a05bde5437eccbeb24fc6802ad2c760001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147883 Malicious code in sequelize-update-umbra-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04b62248932ce1eb3bd7057c3cd0e5b5b2cff794acda4db4a8f091129b1cafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141118 Malicious code in cors-chakra-ui-norma-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6583e3fb97f1c660d5acd6273f78cff0fa61a0737fe5b0b5233e8b582d2659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142824 Malicious code in ganymede-titan-rollup-plugin-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9413cd573eaf0605e0ffed7a4a693e158084145957dfbc0cd50f5112ad02e331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139685 Malicious code in auriga-norma-test-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da79d86b866f3cc16959cbb6ce5270de1ace8196be287862f9fc39b06e0900dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143778 Malicious code in jabbah-gravity-spectron-webdriver-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a14876cd051d8483ba0a279937b068a369f159a8e691f8a587426e0db9ded6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144052 Malicious code in jupiter-charon-concurrently-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb1a4b72f5e7dfbf46d2ec719a3664799804836dcce96db92b44fa905bfbef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148565 Malicious code in test-cassini-luna-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cb101e3f9934846779c5bd46578227d090a1610d7d751f4941518c0b0295c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146793 Malicious code in publish-magellan-gridsome-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f93592d2ec1ec8e63b9e15330aa3c03808c093892a7c9060478041679f168f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141319 Malicious code in css-loader-terser-rimraf-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3369b39705936e81e044143deeb3d264e0c799da1d7145d7a34a47964089ea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144177 Malicious code in kinetic-mini-css-extract-plugin-winston-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a22880454f6c3b89cc13ee3e15c29aca4689483d59fc2695a5b325d74267ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139376 Malicious code in andromeda-dagda-mui-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e6d7338006e8c1b1737fa69cdb4322505b94d628c9feb9845f90dcbeadef22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143328 Malicious code in hermes-stop-uglify-js-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16dcc90e620362e4bd555b092eb9d0b9b3ab2e93e176b6bb7ee96fb441b8d923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147204 Malicious code in relay-mocha-mutation-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba86765ad1d4909a393eb1d62de286cacd7f00f07a84862e0f6f275d9553d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139301 Malicious code in algol-node-config-soap-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab280bff732998bb8bfe8b8157bc57c923098a5f4503da372fb8508a4b66a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146092 Malicious code in perseus-kronos-figures-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb27018f4f80f4bc6b981bd4783b7165ec1289ff35009e4723281ce7b6b0d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139782 Malicious code in avior-rimraf-vortex-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e1632b8b77188e6ede1dbf7a9b7613f23bf5c4efdac1277186ed40c8995ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148037 Malicious code in soap-taurus-alphard-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1d5f090be809b21c5b50628f723d4f107765b7e01ff6e0a5a790938b79adaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...