MAL-2025-139813 Malicious code in await-vulcan-lyra-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed292ee6936e0ee5a9a91b3777a7aa416b690ccdb583cd9256d7c33814053dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149702 Malicious code in xerxes-csrf-quasar-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ece8023c8e2dca4ee014eb30b3c00d6725308eb81dd21a64d4f80a9bf4c6b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140542 Malicious code in centaurus-despina-pipe-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7412f390ed0a56288b73f2f3b4c82e88af73120b691359e975a6aca3e0cacf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147262 Malicious code in repository-dependencies-hydra-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e75f6ee4236a3b8223e7f6c412df1726c301ecb388a8fcf047e23cf9e30d792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147854 Malicious code in semantic-ui-perseus-firebase-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434d4e5d4dfaf9d49ee0ae359f833596501a2b8580d6d1017a79d5082382164a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140360 Malicious code in canopus-ini-carpo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148276 Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142021 Malicious code in enceladus-auriga-janus-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2992b6a3d12d6895e43e9d1cde25e36dbe242d6caedc9679bcdc7ba3385039a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139375 Malicious code in andromeda-csrf-got-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b156646e5ae6831d28447dfb85a6d23732f46c59aebb936a8622ec2da9d24ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142646 Malicious code in fornax-promise-less-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc474568ab6ea1c4a33328711e82d6c2c1af6eefa3436ba7ab3702f46c427ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142419 Malicious code in farout-neptune-dione-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0c1d2d632485105b695892cfdf331ec228fa9c0c4b44667c6207987bd0b91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144432 Malicious code in lint-aquarius-morgan-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602a9e575ea97787e2315b95517cc650d51f2f0bf594adf1ade583b2e9857258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140746 Malicious code in child-process-foundation-eclipse-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c4f59859c4a243e08dd39070370b2f65a3c8c6d979f8032023e0bd0b311b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143390 Malicious code in hugo-loglevel-fomalhaut-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 581e61a3fb294771917013ca8905c2e2d9088aebd76a3cae499452e2fbfbd70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140392 Malicious code in capella-meissa-chakra-ui-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d859cb2764f8b3a39fa333e103e88f965fa0aace5be1b50ec0f1f2899495610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142136 Malicious code in equinox-spectron-less-loader-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6c1f15bfa8b9ceed404f696d7d67708cc87536091aebab7814c7dfc538e968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148955 Malicious code in uninstall-comet-orbit-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40bed052f835a132acb6491032b7a18c1036da21b1b9eab884258bd3b3c53175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143080 Malicious code in grunt-yaml-testcafe-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dda42b4b0a944d0a92c8e190fcaa32a8da8e62b2df0d5a65453f866118b2c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143367 Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139456 Malicious code in antd-google-hydra-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d85f40c521d390c13055ac239cfb90c2232db83fd4b38f76c3648973e735190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...