MAL-2025-145351 Malicious code in neptune-antares-impulse-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e4aeec5e35aaa7df7ac4e19b56ba63478ec0c9494c72c93d7d0c2bd0eb5ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146263 Malicious code in pipe-jabbah-prettier-stylelint-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c51329d43e43655bbdb59a03c24e3aa44dff574c959f7d88755860d0c77f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147439 Malicious code in rigel-radiant-uglify-js-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85630c33cb4c0ec6a482317d825de7dd864dfc1abf5642f7f91212d8139d7c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142346 Malicious code in exec-jekyll-redis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebe6769e033cdb34c98efd5c14365847f4e0ad6fd40b98d87aead05ce274857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139697 Malicious code in aurora-chai-csrf-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e4dc3022282cffa8ced96920d3d0caeb5bb7cc58760e52b23ba6bf5e3742c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139575 Malicious code in arcturus-proxima-cosmiconfig-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad310face776321398b0f37422c8df1b5a6ffe9fee76b8373b390f3511ff0195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149809 Malicious code in yildun-command-chai-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd633c6313d4b9c28b2101444cb08386db672459f194e7ba9bcd01f32efb480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149862 Malicious code in zenith-xenon-nashira-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d619d3ec1c004b82174f5f111ee6cde591c36b7917b4e041dbdba08bd61a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142423 Malicious code in farout-repository-deneb-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12a3a3f541522dac8d16f4a3a5823d0f5cc7e2eb54a84dcd8b8abfd9f3a84ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140849 Malicious code in colors-element-ui-dagda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809245058bb39895586137d945c96906e0075bc1f91d6b1fe5d8eb799fc0899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142916 Malicious code in gemini-rest-framework-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08837658c072ebfa61c447e87f20d110d1781a9926d49b77bebdbacffc5a0cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146672 Malicious code in prompts-ophiuchus-indus-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d007e985a3247da7668e6a5323b5a2600c9ea75aa3ab5f68e692cace8f43da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146744 Malicious code in proxima-stop-chariklo-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144e30f14e66397a1b132474226e3be01e15f725b235ef6adce6f137588a7773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139377 Malicious code in andromeda-enceladus-prettier-stylelint-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4ef2f98ca49c6d905913047175855f99e997a9f886a2b141293ef331770f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140737 Malicious code in charon-thuban-axios-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62878091dd31f40a00204cee8df3fe4229ddcdc28f34c23574e6211e92f6ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143237 Malicious code in helios-odin-start-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db7425d137324f44c522d980f0e97d5761901d2847c2349c5a0b5321bb8f47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148186 Malicious code in spinner-build-castor-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421b20dd487b367106ab1d674e21d45f7c7271a8b88f3ca452f9b4850cb33f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142902 Malicious code in gemini-less-loader-schema-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db0dc8495022edd18720bc3d01c057521a49f26642078a89fdee6a7e5d00f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142407 Malicious code in farout-delphinus-wasat-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d8eb4fd157d99907ee9c9382a68a664a9abec27f6b53a1e2a784d51166e7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...