MAL-2025-139246 Malicious code in aether-xenos-xenon-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c744d5eb04b0340e2461f09e10bcadd760e62c092ed3d0cca00dad88f572b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149643 Malicious code in xenon-build-server-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4772e14eeb46c3faf97d734c19bfc2fa8e6f5721f73eca8f42663e11d1fd880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140726 Malicious code in charon-mdx-mdx-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3feffdbab66463b83704d077bda0e4f7018d3e997c56702ac197352b5b38ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147926 Malicious code in shelljs-prompts-meteor-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dab93fab7c2840eeb9d78277dc25dc871270bad87bf27cccf35509e1ccf9628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148035 Malicious code in soap-spica-gemini-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65bcfb260f49b1ede378ff977a58e4f393dc0062910f976fa5522ad95f9da14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143172 Malicious code in halley-weywot-publish-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b78aa72c8df1766dfac0e590a05dcd0d30073bb00b6efa2ef53a646d396a2225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148080 Malicious code in solis-node-config-antares-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2c8da07ae20da8b6e8ebb222294ddec9a48db903489a63c5a274d038252f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148630 Malicious code in tethys-polaris-sass-loader-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac4872e3209b7e770135a6ad29adbac00c7d4f90525555a0e3aeb4fb833a1b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142848 Malicious code in gatsby-quark-prettier-stylelint-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e4e4bf050d7b75fae97d2283ab85c26f862e19f64821ffd4d663ddf10c514a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144838 Malicious code in meissa-wasat-optimize-css-assets-webpack-plugin-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df071dba98f764582ffc7959b36e91c0b59f2b7e8b79a9a8eb26b36655cde881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142632 Malicious code in fornax-loopback-google-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453791ccec0e6d9af3bb03731b15537c00689db44a6584eef16befedb6d447c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139825 Malicious code in axios-despina-karma-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8151d5ca59d464e012a81354c3926da139a00a0f8ecf51fe736ffc94d0ebf35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146367 Malicious code in polaris-slides-izar-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5652752c5327649b710c0fddf98f02ea9ee6201f06dbb31d2799633b926d6fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146169 Malicious code in phoebe-pavo-grus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a2a606b8dcb49d586718615dca3a20876645f3d5a3d5f21e04dd421df311d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146353 Malicious code in polaris-markdown-titan-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35619b085a70cdc1371d350992894e62fa81e502bb384ba06be4c705b98c6742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140426 Malicious code in carina-transport-nodejs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9674ba3bb4b51d8d50b8bcffcf19428bbdce221fc44e026cbf3f7e6947c75775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142383 Malicious code in express-meteor-colors-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d669fa9c44fcc67de8380cae4a7c1630c7f8dd8f2b7ce7cfcc91f937256c1721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141081 Malicious code in convict-pavo-kaus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dedd338de94ab3aca08a7d7afb89baa6958507406e3a7ae194da178bea1971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140688 Malicious code in changelog-typeorm-ursa-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbaeeabd6ac963216968ece8cff8b5e1740bff68ee18b990b5ac749e299434e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...