MAL-2025-146448 Malicious code in postgres-spawn-rigel-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddf7080a771b3096a15085cdf691d55cb0be498d1dcfe9ddc2d397f6684c11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143669 Malicious code in install-betelgeuse-zenith-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a08b8d9f256af66e0829d46984add840408b56494c471b1c80839bea17a9bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144639 Malicious code in magellan-gravity-rehype-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07de925dee10238a4852a1837422b54d8a5857069876a5f9a55053132923bd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144337 Malicious code in less-loader-virgo-phenomic-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d8ead56d5d6ecc6040860414893d3628f57a62269212a768df83deba87f671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149878 Malicious code in zephyr-airbnb-procyon-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b9ef6c0754649729eb5f9e2c42335591b0d749077825d24757eea9c21d2a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148849 Malicious code in typeorm-lynx-subscription-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac87f57b1600e0392b39a7dd0a1c74cc82dbe14b2259c524ee1c429566b425f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145790 Malicious code in odin-carpo-init-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84df6db1ad28199f71552122f364b369efb4868373a65e0ed553444b217fb422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145429 Malicious code in nightmare-build-norma-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b11f854a4c15692adeee2baff8f05d8ac9ad20ce7c7f5c2bbeaea5ed73bcbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148166 Malicious code in spica-lint-solis-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0bc74a9bf11f5ae9f2d2951d34d018a956cf3d25f4ddd5b84f47c2335f0a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149700 Malicious code in xerxes-bulma-ultra-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98012aa20746e930c0f3c9c7168c194a44ddb823aff4727af9fd632cb003ec34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141184 Malicious code in cosmiconfig-hexo-blitz-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44be45fdde61cdce0f1f9666eb2a13f985e7e09710708a60db96f21303c6011c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145819 Malicious code in ophiuchus-hermes-link-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56dd7db28ba880a2179e9749b736e9768d8e28b8bdb77f52b4ef58a323583ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143690 Malicious code in install-uninstall-mira-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e84c856cd0e9886740c1235d889f235ed09f42e79e4b38c5ce76c4e8b49ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140290 Malicious code in cache-xo-ini-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e218cef6ae3a02747d8688df10e4dcef93e1bf188d5dba1a9af3d41f478cca01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145788 Malicious code in odin-ariel-superagent-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca853f43538e6ccaf35faefcedd77f689550d06c97ab07e67480f13aa5f446fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-europa-install-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c34f5b580e515d57b2f97959e41b59126793c501180fdc1ce97b11c5f06699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd5bb703b8e57411fa94222b918c4cd6f4d263eb9ae29e98c2aa60912ac969b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-miranda-halley-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89d6ca7cce0fd80ab186246ce104178ed46869da529802ed81183e32b0ab323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-sedna-loopback-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557dc7a79fcec22550edb2484b4642de358e3bcb886a741c248d597a992bb19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-ophiuchus-nestjs-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cd933085d0b9483abff3eb45913d7b54297b05a44b9f5e4ef509dc60cea257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...