MAL-2025-148964 Malicious code in uninstall-perseus-duplex-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb67855a44d0be92f1df1e5320c81078eee07d1544db5ad18f99cf2180778f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145614 Malicious code in non-blocking-loop-semantic-ui-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d03eaa288cc6f9553d625662d06e4257bf68ba16bb7d2e4880f8521db9e278f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148347 Malicious code in subscription-airbnb-europa-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93def4c8b79f60fa808459f0c3eb104c1782bc6573fefaa8f6a433cbee409cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149434 Malicious code in weywot-centauri-betelgeuse-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafe0b1da72ba80dc7b25c64c276cb0cf185fbaa03daba66d25a86ae356dd578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143893 Malicious code in javascript-triton-babel-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df95ebfa9186ae43d757483d3b88f64eb4ed03558c9d23498aa6e54017e2a382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143712 Malicious code in iota-bellatrix-husky-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2973f9118f939e46c373ee35b5c10d61a18a3c353d952bce4928a4ce858d4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143257 Malicious code in helmet-nashira-carina-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3942757ca6d78d183bd70caaf20bd6ccf9cac9ee730bda9da89573f57e331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143069 Malicious code in grunt-prettier-chromedriver-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c23644cb4dbe3d6725f5ea83a20e4ec4b24fc724d6f4b8fa491da874661a1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145163 Malicious code in mongoose-prompts-spectron-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664e602c1c1f17845de88222beb490ff65a987dcab2ecaa0d720d4c748d9beae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145524 Malicious code in node-config-warp-resolvers-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf522e96176b7020c00c11bb3927f3ecf1a99cc38ef425afef2524f03f8315ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149170 Malicious code in virgo-semantic-ui-jekyll-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d4e3e628d28d18ae33ed261c564433b0747ad9352364187f69369a139f24cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148617 Malicious code in tethys-enif-nconf-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799881d4131b02e60faafb9b9e35aa3e419a470cb3672d5b78292cc00b780831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142147 Malicious code in eridanus-install-supervisor-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1376bd5cb9c0baf92baabed9c0684dc0c88040e298eda6fe848c4b721834c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148399 Malicious code in supervisor-pm2-phoebe-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5149d22e1e90da59bfbf90b2942e07d4d2189b45634af8923084ab8304f538b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142303 Malicious code in event-aldebaran-nightmare-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd78dda52ef11c256ab005616998f64e0293229ae1c26709e75fb37b2b77547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144961 Malicious code in middleware-mongodb-leda-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac868d322cce021ae4cda8e245af3f8fa418596dc7f29ba457f1caaf7666878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147259 Malicious code in repository-canopus-csrf-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57df37eeb7e187b75a267e5bee180848261635a3aa7cba4cddb584697124456d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142296 Malicious code in europa-typeorm-kinetic-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d512a5890a5e44305f9e42c721f56e63174ef7241f3f019714063a09e284e7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145277 Malicious code in nashira-juno-markdown-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0341b08d5f2ccd87fa18915de455941efd4dc2d2bf55d556c366ea0889c11f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142682 Malicious code in framework-halley-phoebe-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a41b1cea0e8542243eb3f72e7489fb8f21eecd41fe1e4965a1acfe533e66c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...