MAL-2025-143435 Malicious code in hydra-betelgeuse-prompts-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37548852b9e2e29fa1352326410220aa2022e5a048d2bfbe0c8336622f649fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142045 Malicious code in enif-cosmos-soap-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe0f54fbc6915846fb2b13a32feffed132c1645ae6588717350c5848deb52a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142978 Malicious code in got-enceladus-aether-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd05fb12363dc6a9c123b7274c9b266820561db8067462d96b4bf44c9a09a52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143964 Malicious code in json-blaze-venus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51c1c6ec63a3d99da75baa6514564df1e94d76b8d4233dc509033894f4ee415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145216 Malicious code in mutation-altair-readable-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0640e5d7dbd534dd75362e631e2035cba7e43d9d2a66b753602e728af6ba27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149200 Malicious code in vuepress-rollup-plugin-bootes-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459bba9d11d9ac0d287ffc425c6ef388ffc1edc035bb30a831d617d5e190d4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143398 Malicious code in hugo-rimraf-eslint-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074c78f0a4fae1045293325cfb302d1b4d38bfcac2d5281d407656997d74453d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144892 Malicious code in metalsmith-vulcan-lint-staged-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00adaedcfef1576cbaa1825eef6a2fc622e44390a3c11db042201dc15ce9b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148846 Malicious code in typeorm-gridsome-vega-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ae7c566eab25bc74e5af7d016f797ca509921a1608b9aa315acc4ac93808f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148888 Malicious code in ultra-bootes-async-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd26e69c3e192ded739ff679b22feebc040ce7ee70091e860c1087ad35dd6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148914 Malicious code in umbra-browserify-enif-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5200f30b2a52062b1a5052b0b78a3d6eafb3df7d791ba50739e46eeec77116b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144641 Malicious code in magellan-ignite-dotenv-safe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9509a124dfe93788f19cc61f45b7cb85f641b264d55e836996ab23ec7aa81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145744 Malicious code in oberon-event-kaus-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4085211a36343e3d9c15916985078fa44303d1d7c825bd339581113f3770c0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141319 Malicious code in css-loader-terser-rimraf-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3369b39705936e81e044143deeb3d264e0c799da1d7145d7a34a47964089ea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149324 Malicious code in webdriver-manager-lyra-nextjs-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d673068fcf9b21a3d597a451846ee4886f0d517a03798c3d94fda72e0283bb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146734 Malicious code in proxima-quito-middleware-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475f449d7bd5dce4851ae837b64f10777414bd115d80a9416776f5418ac55b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143038 Malicious code in gridsome-docusaurus-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee67c97a3529471781f0204f2dfbe128842c724b789c58e825c918fae1e87e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147362 Malicious code in rest-quito-betelgeuse-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da8ce47e39a6fcb94ed9b5ea924b2b60ce702cb02686594e96bcc4d7a7a669b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148626 Malicious code in tethys-nova-changelog-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91cd76444f1127ad2a02cdb347e60a363ca07cf1a9ab39ddef4716deb7014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144439 Malicious code in lint-hapi-stop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06034557f70b334c9c54b7ae8eeaea3fecdc5515f5f60638224fd9b47f87a83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...