MAL-2025-149757 Malicious code in xo-sirius-cors-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a706eabb5bc1ada3cbadf53709853d49ed268736f58f26c9c2c37e6a7549e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140641 Malicious code in chalk-gulp-helmet-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e819892ef4c38110723e1c2772e4b9b3e9b6d1168ce269f008df5ec18f81a7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145822 Malicious code in ophiuchus-janus-bunyan-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1707429e67eff91832e0f5995f787179dfc97689e79ba2cd9d550934e81e0272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144197 Malicious code in koa-neptune-slidev-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca591866a0d3e7083a8e6c41f35814d002fc420eefffdc1e60ff6f99becf00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145813 Malicious code in ophiuchus-duplex-koa-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026985088b076b41d3553a135400fe4e6195e5a076210af526056f647ef5ba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145231 Malicious code in mutation-rest-mongoose-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0a079ebfbf35826223a4ed7a0397e374dfc04468205ee22c2a20a8b5d25fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139381 Malicious code in andromeda-phoebe-cressida-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c4728389a326c30c3c393099d29e3170fbfb8d7a0ddf8ac4487b8983494750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148187 Malicious code in spinner-castor-commitizen-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d63d7d06b5a118a91516b5a41f47e4a941c8c4b433eab51718c01dda4b1f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149018 Malicious code in upgrade-jovian-yakutsk-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942daf1809f1a933ec556875072240b54cce259a5cafdd8782ecc48976749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146999 Malicious code in quito-ophiuchus-jabbah-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66999af8e61119f23d545bd7b09220c72d04567456e7c544ab5c0b4e0198d68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149237 Malicious code in vulcan-gulp-ora-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d843e4caca914f0ff69b775a2372f42a523768aee1e7918f4b8c6d01501f8268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146670 Malicious code in prompts-mocha-norma-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcafad7150ac059d1088731e36c7e059264a25f901b0fe893009c275bfadc86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144358 Malicious code in levels-npm-yaml-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa37b47332dae889eb886aef463cd255b9f8cdd61f08346e076667848f360354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143190 Malicious code in hapi-meteor-chromedriver-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33eb4d562c669c05b1e28cb2ae849a179412bc5bed948bd6a294ab59ee6fb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139318 Malicious code in alphard-avior-electron-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d2c468b04a822b76a02641754e6a432183303be1da6df9eccbe3b7fde12fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139440 Malicious code in antares-sirius-janus-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8551f142ce2cdd90b79d237c0616d99e1767b3b5b2376a82ea5dd9334bd47dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144895 Malicious code in metalsmith-xml-thuban-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f60078b97cbd0fccfbf8cce00fe77723c5d62b3bf09c43ef64de4ce5da2320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147673 Malicious code in sass-loader-leda-spica-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8c232432fbdab84a648397e08386e458588158d436a4b245573c2dc910e9c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146648 Malicious code in promise-rimraf-supervisor-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59479e17cbe88afc81a1c8a65d70256bb17e84aa6391bdafb3acfc2ccd62424d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...