MAL-2025-142019 Malicious code in enceladus-antares-gravity-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e32c8ac0dee4dd7d37633af6a882cd5fb1e991b6ddeaaddc7048d785b0dbe62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-apex-antd-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62bcde48ed9d8284f245a51dade1699959a6c5392b1c8ce1cf1f0aa82067f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139980 Malicious code in betelgeuse-farout-chakra-ui-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5aba443e95517a5dceda66a7ac4feb006b2baf72252bb93271b21be511fc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144017 Malicious code in juno-atlas-mongodb-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe986f9340e357c59042cb983f39bec644ea50b8a2b37fc076a6fc865abd662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145033 Malicious code in miranda-firebase-non-blocking-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c957b2e89a78b2ed4ffc7627c5903a922bb5f6dd009837001276b57045e6a3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143100 Malicious code in grus-publish-carpo-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cd94f3729b81ded334235fb18dadc466b5abd53f0bdb204d86788c6d9c1941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145262 Malicious code in mysql-rimraf-registry-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef71af5d791cc5bae890390ec31b9e882a22231a4ef3433e9d230f40bee5a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140753 Malicious code in child-process-miranda-enif-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449b12ea44d1088d4d1c3ce7d03a217f14aaee1ae74cd8d63c96d1fb16916fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-phenomic-csrf-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42052997348b7f8d46c2e3b6c0dd0e87440a0ca439cbd7931bb5b4ae3fd164e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147644 Malicious code in sails-dependencies-metalsmith-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae30710522f13143fd61006a6137f7c9f1b8a00a51f277fb5f02534ce8037f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143475 Malicious code in hyperion-grus-aether-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7fecdd0737209befcdd40ff14ff189edd26dc44c878a59f4d80c79df2e29a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142934 Malicious code in global-fomalhaut-protractor-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd11327901ff2b5080328d85f1d8ef235277cd984bf86799e95dadde492694f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-alphard-farout-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd20586f322a194db4c9b71f1e67da30870a5aa8e1a59c3861af98d3115e87c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-gemini-acamar-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0277a04b53abf1394a107472a82edec4a8da37c1784fdd09e4fd7fa5017e6a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145935 Malicious code in package-lacerta-flare-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b12d33c2b7f19771cf94dccb61768ae2e06bb35df870afffde0794f6b13a9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139479 Malicious code in apex-hexo-europa-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd7bc5dbb9a1d741f30b28b3cd2103c6bced884dfafdcc0742d630ed55e169b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140818 Malicious code in cli-zephyr-pegasus-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97815fdda06e8a45bd8006981b533a5d6463aa60146347ccc5c014096f451520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139459 Malicious code in antd-loglevel-sagitta-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74998325ae8c37749976304017144b18be96fb00d74ce19a8051c1a358bb1af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144779 Malicious code in mdx-sirius-buffer-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264cb34d314b13266791985fb1072db94210b9a991abcad1984a90978870dc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140690 Malicious code in changelog-upgrade-native-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985c3ae2349fb80095178ca8c1c3d0e0171ce3f14382f0bb8265bbfd705918e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...