MAL-2025-147127 Malicious code in registry-firebase-less-loader-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60351adb0546cef9790a9625fb2dbb847f363ed481f8fc352d9657ac57c8b3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140909 Malicious code in command-janus-xenos-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4326baae54946d0c93ca65ecacf8add96cb2a440dbb025b5308740cec8e138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149774 Malicious code in yakutsk-luna-sadr-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3996a4bf7897414bbaf10aa9131054dcd59cf851b964ad40cd9224667d292f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147405 Malicious code in reveal-md-elara-algol-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5b0453b013f59be9fa1f4de877ba3900d709b9cc706e7089493988f189d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146548 Malicious code in process-eleventy-tool-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7e1598e0cb1337cf64864e18bf8c8332e54ad5dcc8604ea85495eda850f911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140512 Malicious code in celeste-loop-nightwatch-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8831623cd3ce919a2e1cf64530b543fce464aaf11766e4316e23d373c57b103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146883 Malicious code in pyxis-mysql-dotenv-safe-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5988490b8f2fb96a314f256df9f876d0532b41261f9c1cb297cefb81f1d69354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145559 Malicious code in nodejs-csrf-dotenv-safe-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26fd12eee08a4f07fcaba1a5843f9168cb580449aa6d44aad362c006e15aab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141935 Malicious code in elektra-acamar-equinox-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 030c3556c12040d6b9df31c7bb5424883e630cc2ee0b0e91d4b4a629d6d0b567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141201 Malicious code in cosmos-browserify-transport-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37498829f631e70f8c332116a314debe135d287d9f5da1c3bb49572d356c2931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143168 Malicious code in halley-spectron-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73c947e71aa2563113e69cae4a5ed27b095147d625872993d40c732a020be3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139473 Malicious code in apex-bellatrix-lyra-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32274bbf8d68aee016a8f42086b4f0e2654b8650a7fcbbe110eb525748fb342f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145992 Malicious code in pavo-bootes-capella-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd6ede5dbb0e04dcbf0377128efc1b0a5de122059b8148a2c1126144de4294d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142464 Malicious code in figures-delphinus-ganymede-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7df939af27356d97f9a5ec3f6ee7e607f3e002848db3d2eef83a06a41ac34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148903 Malicious code in ultra-perseus-betelgeuse-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381da3a96c7e7b45a69ec174da49f251e1a0b300209a66f514d143c7960ad8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146333 Malicious code in polaris-csrf-solis-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba790998ac2224443eb8c2227985b455aa02d7be390597fec0d0f74cb3527b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139219 Malicious code in adonis-virgo-cordelia-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e07b7ec5a3ebdcdcfced2c14aa60be59406831219a126661a9b616532b03b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149604 Malicious code in xanadu-octans-rest-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b133c07f9f0f4feff669de21e38816ebc2fb81c0079455765ce01e12647c159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144107 Malicious code in karma-galaxy-proxima-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9112f00b5571a200feea2b0e349052f65ea550e990ee66858706ef898b5833c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139985 Malicious code in betelgeuse-jovian-galaxy-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67727dee8263d1af9289ae9af3406434cdc8e3f776477f2db173ff1b55c525d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...