MAL-2025-143666 Malicious code in inquirer-virgo-global-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026e5004027c23baf1096ee291d7d46f58a34bf01ab59e3bb83f497be54a0955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140630 Malicious code in chakra-ui-transform-callisto-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6aff6f665f5d65e9160b95c96f0f11f50c7be5f51cc556bf3a6bb92a1f1324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143749 Malicious code in iota-webdriverio-solis-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4629d0df2dedd06e5769bfbd601cde8199384d4cdf2eea2e5e5bcab3efbbe6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141380 Malicious code in cygnus-standard-apollo-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d60ec031b81ffb48378ce94a8bb54350c86dbabe71fe1e95d3463ef3400d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142021 Malicious code in enceladus-auriga-janus-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2992b6a3d12d6895e43e9d1cde25e36dbe242d6caedc9679bcdc7ba3385039a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139653 Malicious code in atlas-pyxis-prompts-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4410063892694cb79b5b19fe2c4ff02fc6d15dbf4fb3d1c26b36cb88f479fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148276 Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142419 Malicious code in farout-neptune-dione-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0c1d2d632485105b695892cfdf331ec228fa9c0c4b44667c6207987bd0b91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141536 Malicious code in deneb-celeste-grus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f133612cb4622a9ff368b70b9d7c1d3a32e82cb081c81b65846dc2f0327e20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143925 Malicious code in jest-heka-wasat-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04249879ac576d79fc9e7765efb7d944f2ea8639c65cc9aad3dba332dcfc98a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141340 Malicious code in csv-ariel-sirius-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0e61ae6839d445fb388ec17f3094ac1fd74c68c9d057251528b87749bff4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141731 Malicious code in dotenv-parse-variables-phoebe-procyon-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25727adf9796499061bfc2db2588d0ea8977bae2875b159d01c443e8a78f9aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147506 Malicious code in rollup-package-duplex-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149663 Malicious code in xenon-subscription-configstore-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb66ff1c012081cd21030b4d61b73c3dc1b262d6a90182478c8a1d2c7813b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141427 Malicious code in cz-conventional-changelog-private-superagent-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca679e5bef873726be141435454053c2303e09ba8a82603c7836e0ae50b98986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146318 Malicious code in pm2-zenobia-dependencies-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae92c677cc7adae7b31179ee656ef9e353bf727a7976da012ccf2e5084854b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146474 Malicious code in prettier-plugin-markdown-acamar-envconfig-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361b8a7389a834642eeb401ef7fbc6dea2d900d52e6c622faefef63f839a6cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142136 Malicious code in equinox-spectron-less-loader-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6c1f15bfa8b9ceed404f696d7d67708cc87536091aebab7814c7dfc538e968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149606 Malicious code in xanadu-postcss-slides-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a41a30b3763024f334b151b2995172907baf7eb8f012bf82cddcb6d471fa0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147790 Malicious code in sedna-regulus-iota-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b8ec49fe6c4fab613bdf976a420affd1bf19ba986d1757efa996391dabf75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...