MAL-2025-139322 Malicious code in alphard-enif-xenos-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df0ff5306cd2b232804f84ae88eca9950582d4e2b06f10bc1b0f12c2a6c104b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149105 Malicious code in venus-centaurus-meteor-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e2a7081640c6d00cd3721b0816361c409eb82efad2b5cdab73e585d1ee971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140748 Malicious code in child-process-graphql-unuk-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a73489e36ef579389cba8cf836adf942eed3cb3bb7dd3b3e2c1489719875a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139613 Malicious code in astro-phenomic-yakutsk-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461199e72607e728901321d9c389e62b9c84c9d09c748e5bc6c8b32c0f881eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139867 Malicious code in babel-markdown-graphql-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60f9f37b93f854f7de95a5f91b1829c09def43ec0403cb8fc289eec858589f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146997 Malicious code in quito-loop-scripts-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf51555f88a1a8beeca7b7df6dca9b552aacd7c0864758490e5cb995fb9be1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146350 Malicious code in polaris-janus-dotenv-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008edfb3e2de8aef4c25fb8c4d770de8d3c69bb0d3f4945c1e0c4d20a43e97a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141538 Malicious code in deneb-centauri-pulsar-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6526bda239de64c4d9457ab972fd6ad08c667ce2fed1a79a3cf3f4a444fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140698 Malicious code in chariklo-ignite-less-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c288fec2d5387765684208aa7cf6ecab742922ab14ae5fed28c8176b4093ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139517 Malicious code in apollo-jasmine-pegasus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71845ac8cf484c8fe99a1e0907d4ac0bd2d26a7724145562d9f8007bcf0f8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145464 Malicious code in nightwatch-elektra-impulse-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2eb8e6510ea2b0fe73a9d801e439dec04f4efc6545ba6b27f35e11ed2a826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143357 Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140170 Malicious code in buffer-readable-geckodriver-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b954e06170c9954928e475e5e6c4b220edc4af31fa80dd5b75c4475ce0c0f9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145404 Malicious code in nestjs-sass-loader-pegasus-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6047bada6c6e40096c170843b308e373244e22ee727ddcb994dddfb4c306c896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147488 Malicious code in rollup-atlas-electron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2af1ee5d3e4992b88a68bb2875b0a18c7257ad9df640d557993353350d1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144965 Malicious code in middleware-uninstall-dotenv-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c719f45873e976f68fa0b1aca736a2f137187f56d884006306fe80b62893db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146047 Malicious code in pegasus-readable-request-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8937ff6041de5d507174ef62c688dad04838d26846a186dbe6f7ddf944c3ff94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145172 Malicious code in morgan-dione-dactyl-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95000699eca91b0ededd51164715e83893012ebc80da1d3d2bd604416d49e9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149081 Malicious code in ursa-xerxes-betelgeuse-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486ffdc34eb6aee276dd8cb1becca10cf998b6e3f73a94f7fde812b72734c913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146734 Malicious code in proxima-quito-middleware-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475f449d7bd5dce4851ae837b64f10777414bd115d80a9416776f5418ac55b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...