MAL-2025-145830 Malicious code in ophiuchus-nconf-init-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2cf8d25782cf0be02795f39624b8174d2128655c12d53b293cb8fef2012c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-pulsar-nuxtjs-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6273018e032c98dfefa980044a8e70889caebc56332360a580aac8f43fcb2ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-concurrently-enceladus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9348abe7dceafcbea1bb3601475a31350792e0fcf6ac6edef9d9fbc27f3268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-convict-auriga-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925d7e6e7e62817f4fb1ca00bd1ee6a896852f2ae0608331368353a0c0dc6db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-procyon-cosmos-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5551dbc40563853d6ae0acd4a986d5c867b6b5cbaa8947773d0cb09ede006019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-quark-celeste-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea4334579260db551945a868a011ad61151a559d906846ade5299adf7561ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149379 Malicious code in webdriverio-pino-uninstall-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eca553956144a6de60b33e12b7d4ebf483c39d114fdef6305308ea3dea7c685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147405 Malicious code in reveal-md-elara-algol-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5b0453b013f59be9fa1f4de877ba3900d709b9cc706e7089493988f189d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143580 Malicious code in indus-vuepress-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842edb560ff36acfb2b0d37655c806a3ae96deac3576f8748acf76b28820150f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148514 Malicious code in terser-css-loader-mongoose-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8703c62d0a2eb24ba85a8ea86d01a9dac86e10e7d7dc524da76cb507bcef4401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139950 Malicious code in bellatrix-pino-nebula-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809b5630c0cfeeb0cfc70f1147f91f5cd46f8af4c6bd74bd28cb99c84a0d488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144398 Malicious code in link-await-hydra-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e220cc1a4907d0adb9c57a3c648f2f94a2bd56c3c791b05377f7ea379437add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145559 Malicious code in nodejs-csrf-dotenv-safe-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26fd12eee08a4f07fcaba1a5843f9168cb580449aa6d44aad362c006e15aab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140463 Malicious code in cassini-dependencies-leda-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb33cbc275b61facd852668d9413f1420be2154dbeac2ab9fd7d70de7841899d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146653 Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148931 Malicious code in umbra-package-phoebe-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5170bdb3949a9ddb02e184d4943fb1ca429df391da323586dd6134b1365623f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147311 Malicious code in request-sails-equinox-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a9d4aa712663209c5cec98fb31306a7661ddbaf9bfbfae8b90424fd591cfe7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146147 Malicious code in phoebe-cypress-telesto-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b663e67c0eeee9fc86d4dee7e14c2c3068bdbb64e9ee2c2d6a63e9ea6f40a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147684 Malicious code in sass-loader-redis-atlas-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a3c5021ded3606daed8e7d2199c0462f8a31fcdf8b0206b3c08d5705ac0c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144031 Malicious code in juno-magellan-acamar-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e99251e7b6d6da522255aeedd0b8687a7e623c19e891943c12469e07c795ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...