MAL-2025-142779 Malicious code in gacrux-proxima-callisto-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a6f62d0a55ac88d689f127d9213e3148724a57b123c8a23ab4b5625cf08c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139507 Malicious code in apollo-elara-dotenv-parse-variables-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d6ffb3a5fcc8af7f3f9a0d30af619a0d4d752d0e675b67c66bc3f2ac3cd6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148678 Malicious code in titan-fomalhaut-node-config-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490bf6813567ac10a53b55d8076e06b00264ecb8cb1e85e276c8576f7508bc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148635 Malicious code in tethys-standard-miranda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d3c30a51abc91b12f482bb8456a6a71fc95345ed667f032cfef13cf02b6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145341 Malicious code in nebula-electron-perseus-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b734dc842f23482e428352f82b5484e7d8a438f991e4dfad21d847ca8ed5262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149453 Malicious code in wezen-duplex-cypress-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60ddf1c40b01d135569731cc3be7be938f6a22260de0d1f1e0cf256d2be7c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147729 Malicious code in scripts-equinox-achernar-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75261065f0a6b02ca3e374fc44540af758f88fa9649ec332f7b2c9b4b226f83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147260 Malicious code in repository-commitlint-config-angular-fetch-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02b4b6a63c278ba031ef0f782682f26c1ad3881ed1ae82f7aed8dd2ad04e399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148130 Malicious code in spectron-webdriver-galaxy-avior-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317bb9278d2a73a86218487b9450e0f1ae0dc5d4285a554b8aab31464d25d0f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141706 Malicious code in dotenv-docusaurus-telesto-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89751071ba446007244038c24eea5172d39c9745d04148d57bfdb9056109679a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147698 Malicious code in schema-semantic-release-andromeda-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce88cb97bfc01a7e523bca9e01648fdfffd90883d6f47bed44e84981cbe7afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140436 Malicious code in carpo-cors-react-bootstrap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d871110fa02601bd5617e3520de63bfc553c86eda11a0f3a7140b61843da2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145334 Malicious code in nconf-winston-standard-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086b04cfd8166306ace16ae10617a82ce742c1e4c850c2ad0b65a119cc5913f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144296 Malicious code in leda-style-loader-pyxis-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaec0232e4a46f48d132b5c24d990bc8257f4d2882219fe80a1de80736883a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142840 Malicious code in gatsby-enceladus-kronos-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68d822e0f178a168888b871b773b6a40775cee41b6b188fba2c28c120c58f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145633 Malicious code in norma-aether-thuban-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34926fe5717955e2b3719df604136815a0cd579c4e9b0a766baed82f8f5dbccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145910 Malicious code in orbit-odin-browserify-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4373b2e80376f5a44f87674dead5a592928eb383aa730aec851118d775331cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145965 Malicious code in parcel-mensa-vuetify-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdaae7c1522c825d5fc88e7dee72b39025eedf7b9ba29e41812384ecb3969fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140145 Malicious code in browserify-update-publish-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24bb06a9bd2ef47ffef67f44536c0d250ec84117202527337d00c75f442ad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149377 Malicious code in webdriverio-miranda-atlas-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b871897d8a5677672d07dadfea9ac627453eb33e2885050a1e42fe3e5aff7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...