MAL-2025-148396 Malicious code in supervisor-lynx-enif-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7927318322d4ebf3f391128c73ec470be85f97f9dba951ef1ddef5ce9461eda1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145240 Malicious code in mysql-betelgeuse-barnard-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8988181ea5ddba4cc11196940fce771f29fbba5281f1d6fb5f88fe70f35418d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149453 Malicious code in wezen-duplex-cypress-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60ddf1c40b01d135569731cc3be7be938f6a22260de0d1f1e0cf256d2be7c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149442 Malicious code in weywot-less-loader-grunt-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb982d6776874e40aa7709ce42d3645a50c6612d45d9a0a2c46a365ca6620f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148917 Malicious code in umbra-enif-node-sass-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5cc5e42f8048f554c70ab6c5b94645215bd7b1d372b940ef20b4a95b8cde45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145355 Malicious code in neptune-chalk-html-webpack-plugin-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cd6f6bed9776d6240e81efcaf980f3e86f7f36bdacffd76d292c2d9397deee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141440 Malicious code in dactyl-flare-galaxy-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf46e48e76d6587396a1177789bec4bdc75522c87f71b961f23e88989f9223e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148651 Malicious code in thuban-ganymede-sirius-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e9ae9e62a1196b1a4ae777bc6ae0a4cd8e3f48f279f852f8802edfd651784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141033 Malicious code in config-meteor-start-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f41c156800172217496004b04bf2c1dfd2ae71f2073b0ed785b6ed6984b299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149210 Malicious code in vuetify-fornax-equinox-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5529f7735a79897751ccb1ec6b14b80cd2211f4385b705aa95822ea96af2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142302 Malicious code in europa-xerxes-zenobia-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be76406359009b1618def7488ec5ffaeed01ec585e4adda18e5470a73c35f24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145910 Malicious code in orbit-odin-browserify-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4373b2e80376f5a44f87674dead5a592928eb383aa730aec851118d775331cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149436 Malicious code in weywot-duplex-meissa-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c2f5605f67397ee5dbe46e63f07211ac8cccf32c5834fb4218299cc9736f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145691 Malicious code in npm-standard-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e41ca778897239c3e5cf27fd5df06531d908fac9d45d23d17e3169fcf0ca97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145493 Malicious code in nightwatch-ursa-centaurus-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19b305f14370fe36dcec295ccbe9b4d060fc0c026b5114107f721facbbccc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140417 Malicious code in carina-nodejs-spectron-webdriver-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d909a0b8a65012cbd4ed15cd892115f1d939bc275716f29f577f44d5e0d6476d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144097 Malicious code in karma-cordelia-private-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabfd11c59e2f3ae98ce11ae4f0b511e6e6e016987d8dd0740070fc439c04b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144051 Malicious code in jupiter-bunyan-tool-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8928e876b0f2f7dc596c3128c5fc8e0a7208ece48d1e902d00073c1726a6b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147760 Malicious code in sedna-cli-csrf-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e23e8cd40c2c78f1ec47be9e930934db34eeffed408bdcbbd9688392b70daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146836 Malicious code in pulsar-mongoose-aquarius-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae9710894ce0012d79cfdc2c12a28b1400235171405e4b2701bd3b7165aeee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...