MAL-2025-146053 Malicious code in pegasus-spectron-jupiter-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bfa4b5df1c46dd1bfc2e3815bfe4db8d08c1fe68806f1e59c00c752993757a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146423 Malicious code in postcss-start-hapi-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf0d50e2bd565e4ec443a3833a88464d43936318833ccf7ee79429465a63bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148664 Malicious code in thuban-run-script-callback-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8cab59643f284802fbb4cbd2c8e1b457e20dcfeb60ba0e2de324276c9adc97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147015 Malicious code in radiant-local-magellan-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b008f7cc192e9f504f1506fd14fee85d7b274ba80d2a60521cffc7753559a0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144337 Malicious code in less-loader-virgo-phenomic-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d8ead56d5d6ecc6040860414893d3628f57a62269212a768df83deba87f671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141622 Malicious code in development-ini-start-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4617475d964864836f5e94abaf991f558e3dedca1e65661637a22c5cb9e884be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143097 Malicious code in grus-ora-cosmiconfig-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282f367d8ffce9fba5957d1107c8acf3b5511b53016db1fdb4deee2afdccbfe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141184 Malicious code in cosmiconfig-hexo-blitz-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44be45fdde61cdce0f1f9666eb2a13f985e7e09710708a60db96f21303c6011c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146448 Malicious code in postgres-spawn-rigel-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddf7080a771b3096a15085cdf691d55cb0be498d1dcfe9ddc2d397f6684c11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146381 Malicious code in postcss-capella-jabbah-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1bad8467190852c493002cd67a7360ff1149c14ec334228073775c07a0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144769 Malicious code in mdx-markdown-pdf-andromeda-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a929f851587f1d3c868fb0aec364a24cfc338af4c53ac9f28a5368f884487eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144363 Malicious code in levels-spectron-webdriver-callisto-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f588c6a8a810d94b41a205dab476989bbd997b1a75838b16e70916cce569fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149700 Malicious code in xerxes-bulma-ultra-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98012aa20746e930c0f3c9c7168c194a44ddb823aff4727af9fd632cb003ec34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145819 Malicious code in ophiuchus-hermes-link-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56dd7db28ba880a2179e9749b736e9768d8e28b8bdb77f52b4ef58a323583ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142919 Malicious code in gemini-websockets-pino-pretty-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6200ea4c861043caff0367692838a45658c6405477752eedfc75c3d36d1416b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141864 Malicious code in elara-barnard-koa-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cbbdf075d7109a488c5c9b24914639e5f324c8f17792869971802a71e91a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144921 Malicious code in meteor-node-config-hugo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f518e8ef9cf5f56c4f9ebf60c31ca3d04f56f5f87f18671d956fba7d5f4b6ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145073 Malicious code in mocha-dotenv-node-sass-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c4afa4aab8d95b10788ced224c58c848a4c18a6731fef0fa3aa671ea3161ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145429 Malicious code in nightmare-build-norma-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b11f854a4c15692adeee2baff8f05d8ac9ad20ce7c7f5c2bbeaea5ed73bcbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...