MAL-2025-143435 Malicious code in hydra-betelgeuse-prompts-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37548852b9e2e29fa1352326410220aa2022e5a048d2bfbe0c8336622f649fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149632 Malicious code in xanthus-nodemon-apollo-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7030e1eda3b429416cdf845e5fdc4752ef50c03422f83a833cd7e1a12a8a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142736 Malicious code in fusion-init-helios-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76cdfc161d1d1478513f97b5ee9591ccbfda1519328392d6c0c8fac08f36a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141753 Malicious code in dotenv-safe-global-jsonp-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f253194bc152f223c5f587a9c7fd65460595c70d27749389763c4afbb0de8ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146092 Malicious code in perseus-kronos-figures-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb27018f4f80f4bc6b981bd4783b7165ec1289ff35009e4723281ce7b6b0d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149686 Malicious code in xenos-octans-bellatrix-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fcbafc3bebf2ed9ba8a5cded8eb911df8c059d996f37c770dd5ab22e1e4ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149784 Malicious code in yaml-avior-scorpius-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb86a3851bd639ddaa9794a64622b643d6b6404755edf45bba75dfa40dc0017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144021 Malicious code in juno-child-process-izar-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884e74fd506fa1bc98cfbd4ce57585a43813d8be971e030658be9b01ea9b0e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145654 Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147666 Malicious code in sass-loader-forever-vulcan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d964a2ac3b3ff01e0e1881b5a523f44e15739da835226a37dab4da08c7b4fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147904 Malicious code in server-publish-meissa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68bf8d30989d0163a6a234090b83757dc3739de673a9b7bc37879010705fa098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142824 Malicious code in ganymede-titan-rollup-plugin-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9413cd573eaf0605e0ffed7a4a693e158084145957dfbc0cd50f5112ad02e331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143097 Malicious code in grus-ora-cosmiconfig-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282f367d8ffce9fba5957d1107c8acf3b5511b53016db1fdb4deee2afdccbfe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141801 Malicious code in draco-xerxes-parcel-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575a8ae56cda8728c11a9bb1f81db900ad4861cb7e1ce24d25010623344981c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139721 Malicious code in auth-equinox-orbit-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9475c3f922c44685e8fc041b480d631659d14f00c8f412a69637d2e0f5b0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-aldebaran-phenomic-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5c6621dece89a79d48ebc2def06c13ff71335411f1e0cfa6ce6b1ca559ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-changelog-janus-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f03050bd0f5483fe2c9e2cc51b0ddefa2074e512ce37415611c12ec433f8a37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-nconf-magellan-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea277790b8fe234a34902417fcb515d38b383e722e56e1480996b8af1e9c197d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-transform-grus-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906a845137c30381484dbf2cae553ae18304cb57ba09107e11212c8657a24279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-rate-limiter-xanadu-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a4757b886e26c5c19e77e3c4467c3c02fd3966f22b96f7e278c0a362500ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...