MAL-2025-139275 Malicious code in aldebaran-europa-rehype-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34a8c45a7bd11c718f3ac3f1feed9beca63ed2017108f2364b752b7ea72dde3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144087 Malicious code in jwt-telesto-bootstrap-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8e9921872e0584a4359c709971f101c91881e4b879963244f8b683d3c58d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144216 Malicious code in kronos-deimos-regulus-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b31749f80770b26fa35f08da80af73a65c32d2878ca4298b76f5e4c6188b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147461 Malicious code in rimraf-vortex-nashira-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38ac0ee46954d7b993079acbf423ca421753c5b7c1f34ee247e3328be09c172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141964 Malicious code in element-ui-charon-juno-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc55b9ee51dffe3585c855ea526d5c0021a493b8f3118d417c5da181aa1fd42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140092 Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144252 Malicious code in lacerta-ursa-process-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108481acf0733a6dcfa4494b50cff9fd397842b2c03148422adf1b8d22d76315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139171 Malicious code in acamar-cygnus-hyperion-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54902156b4b37f88f59026798fee089db5ff6660a5881c39ec85cba8ece7921c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139973 Malicious code in betelgeuse-config-nuxtjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45c0fbc9a2ccf5396c8390b337cdaf4eb71c4bf4f4e489939c1669648819f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149447 Malicious code in weywot-triton-wolf-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c76a23fb4b2ec2a76ff4c94f687642511b026eacfe0b07ee54c8f8ec80fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145167 Malicious code in mongoose-yakutsk-pegasus-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f05abc300f89dda9e027447cd4504f6b64ac41da99a7d5319fb1a80a1cea327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149549 Malicious code in wolf-got-corvus-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e498c81e00b302004959da9d5dfafb435ea456e7f6d839489ef09f645ffba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148426 Malicious code in sync-meissa-meissa-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862badc46bc71b54f5183f457e3a9bddd4d70e64ce646c35a0452fa625d03eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142883 Malicious code in geckodriver-spectron-webdriver-chariklo-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306a2d3ddf0c3515faf2f4c8ac4fc3255dc3608a7fdbea69cf7955e99a9017cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139202 Malicious code in achernar-morgan-gulp-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a498c5b041add19cd34cff6f6ea4b481d4f6807e31d95256fdfcc433fba769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144359 Malicious code in levels-oberon-install-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98c11b8e2be55ebd3072519b7f90b1d535d45c258b4361e0edd5ca4394d288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148979 Malicious code in unuk-despina-webdriver-manager-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e0a13df6ef506e64e146b74c4eb6c52626f109f7794a3ddc8150e695338c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147050 Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c1b7077ae1d503d6fa1608613dae97013280d40f52920ea01fd87b77227ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140216 Malicious code in bulma-jest-native-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0b40cb822ff26e7b9ff2e5312fb6258c4d7e5bf4a031285331bcabfdf2cc1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-lynx-alphard-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9b55d95bff3b01b820e5275231787b88a0bedba36e9439919568bbf7936231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...