MAL-2025-148220 Malicious code in sqlite-ariel-spawn-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345720f3836c37e579e5b4f65b8f3644211d05a83b66beeb0d435273f944b5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149665 Malicious code in xenon-tool-acamar-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfa2fd7bf73fe49b6548a52cd6ba56ffcb1fef7d9aed7304babf08c7991af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148492 Malicious code in telesto-element-ui-sedna-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1558cdbfab08f523afa0967a7618fff89ba0c0666e98e2cdbece56425acc7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147835 Malicious code in semantic-release-rimraf-polaris-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4450723988fdc9934497f256eda5cf0448f684ee13edc2559145f61689bf8886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145707 Malicious code in nuxtjs-hydra-betelgeuse-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 818dbd79dab4e20db345cb9b61bf63e37ad4e1004bd2775e6c89313fe9e80290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144016 Malicious code in juno-antares-gravity-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555ca8e4c5a3840f4129af13db2501cde2458849cb22d07cd346ae8a5cf7067a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148656 Malicious code in thuban-meissa-envconfig-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f0f6cece6fd5f5c781801d368a2f9c8378b13cfee5c710de8b83ff681d52e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142577 Malicious code in forever-webdriver-mocha-testcafe-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97be0264b0bb5094af68aea6b2b3948642428c9ca9efd84ddf15d7ab02acfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149122 Malicious code in venus-sails-betelgeuse-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab7dd16388a93e8047078995ecb25ef16b1db8fece43c462fef99199b710136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149626 Malicious code in xanthus-hapi-buffer-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daaa6f3120d4666fb5bf52550f2bea95213da7f8afc741f1360119204f1bfdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145862 Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43658c46bebb5ee585b5255be57e828215cec8078d22d2bbf56c9313f7277ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147031 Malicious code in rate-limiter-bulma-enif-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c05e37b38ab2854388dd18b3d5cb644094e7e0178fa0c761fdc638d8050b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144835 Malicious code in meissa-stream-commitlint-config-angular-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66bb4c4f9514a26d6e113873599c5e7369b845ce22dad41407a0ef16cf60eb7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142292 Malicious code in europa-sirius-graphql-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce6971d451ff8d1c3fc0af0584771bfdb33116e859b78003c35c64a5b7404fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147704 Malicious code in scorpius-centauri-europa-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf6a2a4415d58b5c60093c25d385b84511272149ac38e3a8500e2be1907eb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140275 Malicious code in cache-luna-socketio-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ee266d139f89aff6fffba83237a702f6d2665de63832d7becb99225fceef2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148072 Malicious code in solis-cosmos-commitlint-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2fc1a99145847686612ce007cfb470469dc5dfc4e44c704c39abe06ffaf80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144043 Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146916 Malicious code in quantum-tailwindcss-kastra-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587b9068c89edbc2f8b21cff50936e1ca4e6130d24272049f5bbaf0ec0f0f50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142552 Malicious code in fomalhaut-rest-xenos-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59d8633530988e6f0c2f5b25ba330adf84ea689d15e0e288004ed1d9bad46c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...