MAL-2025-143482 Malicious code in hyperion-jsonp-rimraf-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f43282474b34da1bf6211270b82aabb48e6a51ed00ecef30170b32a906b9ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139998 Malicious code in betelgeuse-ora-grunt-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6538caf613979a45bfee277338a82e9115c7231a4aae8aa4bdaf88740c452d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144417 Malicious code in link-ora-gatsby-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2cbba5177f393474a7266a1fbf0f8ee23ba7cb420d9d2f5792a280484e1655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148193 Malicious code in spinner-enif-spica-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d26974d55b3997bf277a318228dec1fe0e89c9b846f87315c2947d1d87cfcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146101 Malicious code in perseus-ora-non-blocking-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72234f1311d1f62cd8d227441dd0e05d6145857f9cf50b8d867c692c33ba1a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146853 Malicious code in puppeteer-ganymede-hermes-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e3398eec782d88542539c931720b191039bca6ee9204f7b0908fff31927037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144851 Malicious code in mensa-foundation-apex-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5be0fc327e8e38982be98ae04183db050f3f4b08c7cc0af9727c9c2239019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142478 Malicious code in figures-postgres-tailwindcss-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddba4bd4bfff12e648a4581a1488a5f2375d47369a591a774a8958438c79459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142007 Malicious code in eleventy-nightwatch-betelgeuse-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7320bdb07066e0a567dc2a7383e4ee563738cbdd9f7bb0127ee6f78f232f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148914 Malicious code in umbra-browserify-enif-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5200f30b2a52062b1a5052b0b78a3d6eafb3df7d791ba50739e46eeec77116b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139764 Malicious code in avior-cz-conventional-changelog-shelljs-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff22f6e1d86aed35355f82b088b7ac1a4a4215ad40bb82f0c8cbe3faae43710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145094 Malicious code in mocha-transport-indus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d4f63add009e7c55ca249a44aef7ef151f3a1806949fde2c2fc4f7f2e01da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146947 Malicious code in quasar-electron-geckodriver-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a63df6708cf72c0b4c2dc07ecbb3b9d21ca55caa3ad7e1917c8c401d9860a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147362 Malicious code in rest-quito-betelgeuse-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da8ce47e39a6fcb94ed9b5ea924b2b60ce702cb02686594e96bcc4d7a7a669b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149076 Malicious code in ursa-spawn-writable-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98529c833cbb87e017a27e085a759a2b5c2daa8f6c81183a5d835f87821f4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147620 Malicious code in sagitta-spica-acamar-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bd2e1015252bb719f8837c2ef58e6c0dae1f9260d556bf3048de7b0824529c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140258 Malicious code in bunyan-umbriel-relay-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f3f063c2281fff1e1b70c86da2fc195585d3c059d7911720de2e6ad6746f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142268 Malicious code in europa-fusion-cross-env-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e4ea054f4fc93f73b963ef75bf1f177d97b81aeb0b08def0eb5605e494fff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143846 Malicious code in jasmine-bulma-janus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378d5568b728345b170c22d3c4ce9c4d7d79cd2eef452efe9948ea118b875b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149824 Malicious code in yildun-terser-webpack-plugin-configstore-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8105757ab51945dabd778023f1559d229f664324c21b37363182591be637986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...