MAL-2025-146054 Malicious code in pegasus-spectron-webdriver-neptune-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfd834cc94f3d97018894b7ada929dcb9499b32c25a4f8e6c33026068697ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145240 Malicious code in mysql-betelgeuse-barnard-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8988181ea5ddba4cc11196940fce771f29fbba5281f1d6fb5f88fe70f35418d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146273 Malicious code in playwright-bellatrix-postcss-loader-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f467e2fc268d1b704ef9d37ba01500dbe9f530113c6d49aa5e08f79a0efd31fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140145 Malicious code in browserify-update-publish-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24bb06a9bd2ef47ffef67f44536c0d250ec84117202527337d00c75f442ad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147260 Malicious code in repository-commitlint-config-angular-fetch-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02b4b6a63c278ba031ef0f782682f26c1ad3881ed1ae82f7aed8dd2ad04e399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143846 Malicious code in jasmine-bulma-janus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378d5568b728345b170c22d3c4ce9c4d7d79cd2eef452efe9948ea118b875b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139560 Malicious code in aquarius-webpack-apollo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa3d71e1d7a0e15bb88b0ed383e56df383ddcdda804b23c3df1115b266cab90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140417 Malicious code in carina-nodejs-spectron-webdriver-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d909a0b8a65012cbd4ed15cd892115f1d939bc275716f29f577f44d5e0d6476d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144051 Malicious code in jupiter-bunyan-tool-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8928e876b0f2f7dc596c3128c5fc8e0a7208ece48d1e902d00073c1726a6b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145175 Malicious code in morgan-exec-uninstall-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584ecc682ea10cbf9660202820033a0cc131524baae86da7bfea15e33d047fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140436 Malicious code in carpo-cors-react-bootstrap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d871110fa02601bd5617e3520de63bfc553c86eda11a0f3a7140b61843da2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142291 Malicious code in europa-scripts-betelgeuse-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8758ee005ea30461f9a67d19287676d1bd1758295212a07c48fde2f07926de95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143280 Malicious code in hercules-electron-builder-testcafe-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650e1e45c6b0ae8b1cc5389d03c6b74a2449cef944439b01c8b49099f775ddc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146836 Malicious code in pulsar-mongoose-aquarius-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae9710894ce0012d79cfdc2c12a28b1400235171405e4b2701bd3b7165aeee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144766 Malicious code in mdx-gemini-miranda-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f28fccc481744cd6741ba11920c2b73942570a19cfb4e00807f6b56f3a72266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147540 Malicious code in run-script-changelog-publish-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90543340762c3dc3a715829b13e8c3f5016889801d840eba6365aa107803080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148783 Malicious code in transport-cypress-delphinus-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17eccad331b7bf36c8662f97af8938cf65348ccc3a67e2274b6676b36bda5205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145600 Malicious code in non-blocking-antares-configstore-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bf3571b0999a8ef8c8705b0f31f623f8213498f18aaff113a2f2fbb2675667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148101 Malicious code in spawn-lynx-phenomic-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ae23c6d32d600455a747d54659c1bd327ff6c5d32b9722c11f6e3dddde3461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141949 Malicious code in elektra-link-postcss-loader-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e674a4cddae90ffa7220f43af1d7218a93cd063c9a449faa4714fed4383dbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...