MAL-2025-139416 Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140358 Malicious code in canopus-config-karma-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2895038fdbbb1d7ed4a9e86b2391fd50d2cca0ca675432738eca6383610026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139344 Malicious code in altair-aether-terser-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac6f6a1789acfed08c8328515486ce3d870408c7b4fd762bbe441751e33745c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145245 Malicious code in mysql-farout-morgan-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17d6cca1564673afeeac69a3122e8b70e262fad2863a5d0639b1f4bc676a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142931 Malicious code in global-dotenv-safe-mysql-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c214ccb52c4d406e705a660e00408acf6f13309f35035e2ce944ca6a57c77a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141037 Malicious code in config-puppeteer-spica-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c91cc0f7b3784492f428d41a716eb3d3b4bd1739e61db8769681c5e6d90d167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139982 Malicious code in betelgeuse-ganymede-norma-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383622fc4616a1973794983f9948fc69040a14e146f63c10bd1309edfb61567a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148975 Malicious code in unuk-apollo-spectron-webdriver-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d734ee8393ddd4f3ccab4d05b46d4a8085efb891d8ee9e67bc44443567abaff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149675 Malicious code in xenos-fetch-gulp-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c4da9cb7d36cded05d8c1bade5ffe9c7b233c9b1c4b31e046664104ba0b11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147302 Malicious code in request-mysql-equinox-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983cac0a9973d4c3bbd7015ea88bb041374eeaeee471fba0084e1691bb9c92ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139770 Malicious code in avior-jabbah-proxima-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfaf0f7900b83bfaf360a985b7e89565f43d3bc84dd987ab108ff935e06aa7fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141487 Malicious code in deimos-alphard-nestjs-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2a1db44cbf758c023fddc4953d43953b89647c6ce1a2f527ecdd091804b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139424 Malicious code in antares-nebula-webdriver-mocha-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c754df984c3ca6bbdfc1ad47c5181c9fb48593fe4212e74086a8e5cf186b6f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142155 Malicious code in eridanus-shelljs-oberon-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedf7fcac32902d42c53e87e4ae9c10496ac0ed93504a0123a0f2c6475eb893d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139850 Malicious code in babel-dactyl-axios-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5555d51a3c30b235b801c089528466d6a0df5987c40cc9a53c5822cc3bc4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145305 Malicious code in nconf-backend-comet-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af761dc5140f525098aed3c47cc1d795a86700f2c528c418a56ec570d847fac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148495 Malicious code in telesto-hercules-axios-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ace812daff57c69b2929734f5e4dcff2755e162c1bb4d9ec8ccb6978d5c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145799 Malicious code in odin-mira-spawn-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aa37a11a06e592a83031a43a7cd565dfb52011bdb1eddb5c685681580c515f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149665 Malicious code in xenon-tool-acamar-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfa2fd7bf73fe49b6548a52cd6ba56ffcb1fef7d9aed7304babf08c7991af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146069 Malicious code in perseus-blaze-ganymede-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c36548131bc59eca950e04d1b40f3421ac426a7189a8aa205124a8688d65eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...