MAL-2025-139172 Malicious code in acamar-dagda-canopus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77f13b3a7f9e9e576d7e42f24d4d463de5af216c31245b4cecd87f52d7ba10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142018 Malicious code in enceladus-alphard-tool-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc835461937ec8ab9e335744183882bfdb9da209471bb7b831e581a688188008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149718 Malicious code in xerxes-sagitta-inquirer-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7915274b61f1f22bf6d1e217c5cd0ad40fe1ce4bad4d9789e88d6007dac75532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147661 Malicious code in sass-loader-callback-oauth-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212c3f3b0e02fdf86f047a32b47e085f6d54d34e5a3f94920acf5f2c829da336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145353 Malicious code in neptune-await-despina-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a6d53edc41b4eac7e43b6260ad5956903425e2353d9b8a3102be416f92ee1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148290 Malicious code in stop-changelog-centauri-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc4dddb8925f9a970aa7c5687caf4439035af040dcd9f9d60675c26aaa27ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147801 Malicious code in selenium-cordelia-remark-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78d69895638b3256becdf9e96956dde010d6df9f3b7e9db4f285cc7873ba6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141354 Malicious code in csv-pulsar-hexo-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7aa4dbfbc4d37f3551bab23b708a86c043fba750ff0f018e4c7625657c948c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139239 Malicious code in aether-procyon-corvus-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8123898624474af520819d1c6b677e6d1936dc7da4b7636be947bb8d4405b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144151 Malicious code in kaus-mdx-miranda-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025de33563ba654faf7012005fd1308c239880982523c8e476247efac6b0ea1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148744 Malicious code in tool-nconf-uninstall-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5451848821f91944130f40d2773f898a24946c94bc868c73c1fea30875de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142960 Malicious code in google-hermes-telesto-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583eed0b0920ff215525064915600ba5db9ac1537af94ba4462d0043514e7c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147479 Malicious code in rocket-semantic-release-spectron-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789b9c2bd6f2aea5533f70a230da1e752358a6a24ff8f6cd758000f14176de92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145785 Malicious code in octans-venus-fetch-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7185ffd095e4f4b31889ffa376123541f96ad34c8939f74a4f4ab17f5905aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149474 Malicious code in wezen-webdriverio-rate-limiter-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6e464d4d807b9eef9069ca788254eff0f8533e1006b633e282f18e6af6ef0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149203 Malicious code in vuetify-blaze-wezen-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acd317c6a436af395b26d7399e04af36ed8f51614a95c8d7125b905ab6a7f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148145 Malicious code in spectron-webdriver-unuk-eridanus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 036ddd678cdf1efc69c67d7f43d50ea03985902013f5fef75ae1e917965b269b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143500 Malicious code in hyperion-server-eclipse-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd58e9481e031c0504d3d4c1415914d18634ea2b59c9a980a8c56fb93290b048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139415 Malicious code in antares-ignite-apollo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9955c0bdc50f51dbe4056f786cce9f2a0b67b0957ae6479ff9241960d1faba6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143117 Malicious code in gulp-json-buffer-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5c127955b6f819a7c29832a75f751a7060b856d48eeca69ce552869a8fd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...