MAL-2025-144766 Malicious code in mdx-gemini-miranda-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f28fccc481744cd6741ba11920c2b73942570a19cfb4e00807f6b56f3a72266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140817 Malicious code in cli-xerxes-less-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f77ad82d11d28fe06dda99aa8669bf376292cbe56864e2823c56240c757942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142779 Malicious code in gacrux-proxima-callisto-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a6f62d0a55ac88d689f127d9213e3148724a57b123c8a23ab4b5625cf08c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147869 Malicious code in sequelize-gravity-jasmine-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228f87b36c2904f348256f3417d1250c227305fbac8fe4a7e906258214771d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142363 Malicious code in exec-winston-loop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43316f5983d8aca28f6e31863054b8c78639303e35a1e92460a364c3a9d917ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147260 Malicious code in repository-commitlint-config-angular-fetch-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02b4b6a63c278ba031ef0f782682f26c1ad3881ed1ae82f7aed8dd2ad04e399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146722 Malicious code in proxima-luna-janus-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3485ed97ed5ee07ccb23c5e647638790ba3d17b125c77e378bdc54f224def390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141389 Malicious code in cygnus-zenobia-castor-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6fc83f9a9066367039fde3091f84f2dddbde9e9b230041941f6f04b3d02dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146337 Malicious code in polaris-epimetheus-chariklo-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbe848b613b149556fc1e2da071bd0f0b9920973ce442185806e397d958f406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149377 Malicious code in webdriverio-miranda-atlas-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b871897d8a5677672d07dadfea9ac627453eb33e2885050a1e42fe3e5aff7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143254 Malicious code in helmet-miranda-halley-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89d6ca7cce0fd80ab186246ce104178ed46869da529802ed81183e32b0ab323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146310 Malicious code in pm2-reveal-md-neptune-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e6664bd6d8e46486238cbd2c44ed1f213c9f314b38d2df6e99541218e3200e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-global-promise-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c94e7b9cf8e7ef681f2d8b9d20af61cfbb0ab1bd542dbba0f84d592e384c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-rocket-server-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202c25aad9abfdbe4f7b790c02ab365ed6126e7de8229a8157f48c9eec9b4dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-heka-chakra-ui-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae1184dd4f60e3b2275845574ebb643cb6f3a70b0d5d35c2daf60368109d82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-procyon-async-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406323274fbbac08d27d4f8696c166bcd7c5e3cb75bf00e2b4894f6ea9e2bed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-bellatrix-capella-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8417ef4c5d84311dca2374da8d719b1f2a3b734c4af2cc3ca9fb35674dc060e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-webpack-ceres-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489f77539ca50b4cd121834f2c9ffd7d72dc229c148b983939f45728486a3dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-cz-conventional-changelog-aquarius-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c86bdafd407c357b4e5f009e701e69157cd73df2a754c63ee12fddba5576de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-charon-delphinus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c0f4101841eef379d3eac01b8a6dff8b51c6b61ac857ac5a3fcb6720622993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...