MAL-2025-143693 Malicious code in io-charon-dactyl-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb076b8a92826ac002b2ee673f2234d7610855e9af4e253a5bd890350ac07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139295 Malicious code in algol-forever-regulus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4211f798c9f412b0916abfe461be011e99a9edb91f9ee5b1abcd2094556917da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143745 Malicious code in iota-umbra-upgrade-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c04ac07f526f3fcfc93f56356dc15234e960923abca2cb92e88e86e933e315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141148 Malicious code in corvus-corvus-atlas-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc931c001a969e7ec61a962f459ddf810a83bfaaf634d60d45f190c942681170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145130 Malicious code in mongodb-halley-pavo-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d80adb8e3319f874101402502a070ecc2ec48543eeb374138509cd912935ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143634 Malicious code in init-wezen-umbriel-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd116e1696c115501f7f27dbb047db3682247fec5c2456bee3ebbbf563f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140285 Malicious code in cache-slides-blaze-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c88be71e7482888225f7680add9cd29413792e910587914de99a7bc32af6ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148262 Malicious code in start-avior-node-config-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b94b90f7b87c9bcbf8fa48442a4412439280a7051468f929eb40ad950469d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143343 Malicious code in hexo-iota-release-it-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f83a9d526b35e0af23d3d425be9a0ef87caa366f722a9b99e5f69b23f8b7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139196 Malicious code in achernar-eris-halley-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb67b048a0c6e8814eae9316db3934da6078e2a0cd2b8227ba096492e3f4d96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145076 Malicious code in mocha-ganymede-dependencies-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbf7f214a0fd32e6dffcfce3cd4db712ae91ae3fc1f73988bdf26b98e0d7c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141133 Malicious code in cors-repository-algol-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f9a095a39a54298b2ecb6bc7b7d7c95b7ef74618537abcabf32c2fd88630c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145060 Malicious code in miranda-sync-despina-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddac1488fe65453e57b62caf85d562e3e2b5eda8fc296fa78fca7fd5046bbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144733 Malicious code in materialize-await-cosmiconfig-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153d9c78b1503d4d82f8378f93edab2df4d30b9f1128f3bb265df2952e37843b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139603 Malicious code in astro-fetch-orbit-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4a4aec0103e82a9b92eec6da2e2f37912178bf0574e603571607567dc07da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141568 Malicious code in dependencies-fusion-prettier-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b282945432c3d34eb90c67d81f9fdba5527b68fe207aa9b76015411e02c7438b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140765 Malicious code in chromedriver-deneb-auriga-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195fea34eacdb423bea8abd3996ce12a0dbdd074896f23f92547b9d6e20087bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145280 Malicious code in nashira-mui-server-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1cbab30830c258d4279b46b8e5d3cde0723f00724a5e0e18c073551ed2ec03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139909 Malicious code in barnard-izar-castor-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a0a7c2000bdd07f91cd07e1229e7af2f56859178e4a5c36f9e5c9f818c0b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139804 Malicious code in await-proxima-mui-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d650a20b5908dc81ddf5fe514abf51c8ed0990e33cfb1fe510b4db247ea4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...