MAL-2025-142829 Malicious code in ganymede-xenon-public-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22712844b046b055495c9f267eb2ca2d0528d3206da37d3cccb5acb32f064412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147062 Malicious code in react-bootstrap-jasmine-restart-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a0d9a9042d8fd233d6e74a451ea09d2b6c63f1d29c3db92cb84b1dfc400325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144572 Malicious code in luna-module-polaris-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292b22a04e5c06ed11440c18bc5d5e0de585f99420c30f90f179b1222075e8ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143785 Malicious code in jabbah-nuxtjs-spica-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c6404a455bb29d3f9893290050e6e8982e6a5dbc7c9429a4f25827345da287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146927 Malicious code in quark-kaus-mocha-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51907e0511e3783ca6d060b1760d416e9bb6c9bf1e56b1a51d5cff0fdfe52283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142485 Malicious code in figures-version-carina-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3513c6b2aae948d358ed83dec49f13f53edd21ddd9d26e0a8146e9d9bfc18824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147675 Malicious code in sass-loader-meissa-pino-pretty-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a246180b1e7c49c62f2f18f439a38315a0f41c7affafa8418bbc4b48d1a8f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148604 Malicious code in testcafe-sass-loader-morgan-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144351 Malicious code in levels-carpo-fusion-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d8d5f23e9140fa627019e2ea08fbc2a8abf4e959025b337ee09e444f301e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142004 Malicious code in eleventy-mdx-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f74c97d401a134f9b646a3669fbb031a73c2e27575285bfc7e10c686d79f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140274 Malicious code in cache-jekyll-pavo-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b711485d592350a6a83a3dabdc407a543fc87d03c86434e29a65601f32010d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144032 Malicious code in juno-meissa-electron-builder-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c5ab002ce179a55f0a3e800837dcb74582c94b814ef5bca6c96140113755f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149846 Malicious code in zenith-commitizen-update-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79414b36fb87b9e075a85ceb31b5cf9491f928b41b592a4672ea17927ba467df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139730 Malicious code in auth-radiant-kastra-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7da4a931fc7d11a9f6c84c5f2225ad0970d868b34bbe685c179c1601b593551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146565 Malicious code in process-radiant-frontend-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ae85598099fed261ece31e21b8ded0a3b2032ef48793745a4f6db01c8c0470b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145507 Malicious code in node-config-flare-elektra-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152e0f9d53e98bcf6b041b29988e6f2da083d076da61a67d8b2c48005d4b7d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141039 Malicious code in config-sails-repository-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef22d2e7c169092869951d0002a750ed5d23a4793af0396d7f0f5460b51b67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141349 Malicious code in csv-neptune-fetch-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb24c5d3b535a0b5cce2ce3b89a0d36c4c30e0fdd5322f5b0ca38d84d577bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141992 Malicious code in eleventy-callisto-forever-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447abbef07e2169825384d0a4f6cd21674555dac84ac23aee274c4866a00fc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145831 Malicious code in ophiuchus-ophiuchus-hydra-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47788e2971989ebfda1e3e06af9e81bcdc202bc958dd8727b5529b76fd1c5c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...