MAL-2025-143613 Malicious code in init-antares-deneb-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf06fd9688c77aeaeb15ff5608ce4a1fee14ee26aa826fd990a8f62ba09ced6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145899 Malicious code in ora-webdriver-mocha-koa-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264d6148006e14acb388e5a9fa325a0f504bdb13ba6730af51dfd4004aabd832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-test-jest-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad12d88a9ef4fa5d1ba411a5bbf157a43c53931bf1c5eca24e0a51a56eb7b65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-antares-terser-webpack-plugin-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 621360111310bb1d7dcd6fc7f22631c95a9ca27f7eed5e0424872f4f863ea333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-elara-eclipse-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048347085c1a35d570cef25eada38c7e80fdabf3e21687fae65165bcf3933e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148280 Malicious code in start-run-script-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe781b616783272336fc83c52ff140f961736366976234f8bf7a06d0ac590387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142063 Malicious code in enif-sequelize-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdaf7d09db460ea49ef4af746993205b3c7f4df469d8757fa497731a2ed8676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141614 Malicious code in development-chalk-rate-limiter-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27945306c863c8a6c27ff91abae72c44edef7189fffac57067a019109c805089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144143 Malicious code in kaus-firebase-jabbah-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83963e190ee16a0e46c3d5d97c4e3e65793b6f16cd4f7aba6809f48e59ffc509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147253 Malicious code in remark-meteor-leda-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba70179fa671020e8e1ec091d1f17418204aa9da3170160559b1468c152ee42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147634 Malicious code in sagitta-zephyr-prettier-stylelint-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e0bc5f74d9334238f6e4593bc4bbeae0f83fc66d8a18c2709882e19e7a5326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139975 Malicious code in betelgeuse-deneb-request-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8764e4fcb6d47a864d8253ed1edf3345e21de2108d51e7d97edb476081bf9361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140792 Malicious code in cli-dactyl-restart-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e4eca5980d748e273b5ae71572bacf25be9a4a96d84712a0984c38431372d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146856 Malicious code in puppeteer-nightmare-lynx-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf9b9a4d323551112c1b97a4bf77dd72a6a18b3f8deda45f95f89e1e48f6f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139555 Malicious code in aquarius-ultra-grus-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca227366db798cd1a92449b775f7cea1d9418456b2ff3a5363a2787a3c9a67e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149374 Malicious code in webdriverio-link-pino-pretty-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa79428782cb74d0590db651ef2f95b2ab2a1a1efad5f7d841d627547af0f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148884 Malicious code in uglify-js-supervisor-avior-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243e62c7acf1016e1ffe6c9f001183b55d05715539a43a4ed89a371a38e64bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146678 Malicious code in protractor-aldebaran-native-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec0d5cc0e40ec412b1d438650ad8c4376000d846c37ff0e84f10ed2b00b6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141889 Malicious code in elara-style-loader-comet-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab4c1c4efa7b3926279345b2e9565aada7886b972c1b9b8ce7413517ab3c5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141015 Malicious code in concurrently-subscription-zenobia-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f07782358ed6392ab262a9806120581fa555e342a3a1498ab8aded398757a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...