MAL-2025-139354 Malicious code in altair-mensa-cypress-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d753751860507a77cc68b0c83405e74048223a9aad75308e8a43711b12ff1817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146043 Malicious code in pegasus-morgan-polaris-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ca8a23e8d2cec9a4cf37fc974af0d4e84bfc6df5c1adc870b4fda3cc145cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144958 Malicious code in middleware-jasmine-nightwatch-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8766d8d60ad74c2cf23402725bb2b7a3c14dd9413d43c03914e39a047fd977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139969 Malicious code in betelgeuse-betelgeuse-cassini-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de30e4d515c90c8d81f0aee56858ae6df343a3a02ddf287cc29b3b20c1380a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147326 Malicious code in resolvers-hydra-adonis-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9766e27ad16780af1cc83b26d319905d9c6ffcf233d0efe0840ea32a88799f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145188 Malicious code in morgan-typeorm-auth-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5870522f5a30b4506aa63c90f624d599dce2981d4b91b365a803fc93825eb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145451 Malicious code in nightmare-ursa-non-blocking-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed89bfdd8b3aa3d1c2842ac2f5b9491ba021c343e251df6144e233f0bee20006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144216 Malicious code in kronos-deimos-regulus-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b31749f80770b26fa35f08da80af73a65c32d2878ca4298b76f5e4c6188b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143068 Malicious code in grunt-pegasus-carpo-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0b6d9f2943208f90642829604ccf588014d5ade91aeeac3b29505525930402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140543 Malicious code in centaurus-enif-registry-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6ac6a6965728f64abfb8f42a82d75becc9f9347d7f4a9e8279711d36bb478a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149654 Malicious code in xenon-oauth-framework-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dce1782e99ecf2a9a1ac060d68897c127bf998539a101ddbcb4e03d4c4e560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147707 Malicious code in scorpius-deimos-hugo-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927c90423c37a0e1916c96ebc222fef6f8943fb8899be71e305d6cc4bfcc9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145642 Malicious code in norma-hermes-javascript-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3145239131249d38911912839b909da09543c4d79debd3368f5ea461512c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147592 Malicious code in sagitta-dotenv-parse-variables-sedna-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e631ac7a9f4e7976e8b8d30eb13de54d25dc87fc9cd528ac93f946c47ca990a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145378 Malicious code in neptune-request-hexo-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ed02bd25ed21d5f7601ebb7225bde8001cdb1d7df9b1567c9de1530a5417a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148736 Malicious code in tool-jabbah-inquirer-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c23f115a9c2230624fa6f80276eacf194a28e0e56c5b3d3a789f1e944714c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141953 Malicious code in elektra-tethys-perseus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef082d3f916b8d6e7affb1ebfad75ec2d3a3c8f474313eb8bca82a69e1d589f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145129 Malicious code in mongodb-grus-despina-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb803ca4e42703dfb4576e1d080b3184c952880975f29de14f49945a4552af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147694 Malicious code in schema-hermes-protractor-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311ec7f9045fddf8c7c21a4404faf26ee70fedcfc9e70a91864483145cfcc228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142898 Malicious code in gemini-grunt-spectron-webdriver-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd2eb0f83b8c1e751ec487940539f95186eba20bfebf72fa8634b5c6935a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...