MAL-2025-139416 Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146686 Malicious code in protractor-gridsome-levels-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da0a55e3c7d60b91f3bf11a33482c6cf3f299f5b9285ece091b50d6d1699e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149701 Malicious code in xerxes-chromedriver-query-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d823f1f1e63d055ff00a2f0178f8285f6d4c179044f1e950e9003575ff523cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143424 Malicious code in husky-polaris-fusion-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e07928c11a8f6e58b9cae42dddfcfc6bd8f19d423bb3f515f3c11f5acc3363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139934 Malicious code in bellatrix-dorado-halley-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd77d58a1e5eb06d335b824c723bba81e37cef46ddefa88e94c9bd1ef938523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148975 Malicious code in unuk-apollo-spectron-webdriver-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d734ee8393ddd4f3ccab4d05b46d4a8085efb891d8ee9e67bc44443567abaff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140736 Malicious code in charon-start-miranda-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4739b0491b5f29158a524432828b6abf6fc274c2a323ede927229fea9fe88f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139268 Malicious code in aldebaran-bootstrap-mensa-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009c71f1315940d59a9b82670ee814e68fd91ab6279feadee976b4cc23c5e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140858 Malicious code in colors-phoebe-test-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c43aeaa1057f79a268248822cfbb33c3dc5c3fab01fcb14e8148d15d920e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148492 Malicious code in telesto-element-ui-sedna-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1558cdbfab08f523afa0967a7618fff89ba0c0666e98e2cdbece56425acc7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147704 Malicious code in scorpius-centauri-europa-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf6a2a4415d58b5c60093c25d385b84511272149ac38e3a8500e2be1907eb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141080 Malicious code in convict-mocha-castor-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf50b62bf29b274dcb258f4cbd7260d8799e01d06ed3dd44267be145c4590df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145247 Malicious code in mysql-halley-loop-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297756a4de498d66e54f04ec547723dad2d3c41b72fe87b13eb6442aa05dba9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144768 Malicious code in mdx-markdown-less-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7db5253c6ebd1a1cc5ea1ae957011e9cc7ac92f16d87372bd1b995933632739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149675 Malicious code in xenos-fetch-gulp-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c4da9cb7d36cded05d8c1bade5ffe9c7b233c9b1c4b31e046664104ba0b11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139850 Malicious code in babel-dactyl-axios-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5555d51a3c30b235b801c089528466d6a0df5987c40cc9a53c5822cc3bc4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142052 Malicious code in enif-less-procyon-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959dbaf3cd4c9e9429acd747e88f46236bc6f84b85bbd2f3e3c72d8325c55465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147439 Malicious code in rigel-radiant-uglify-js-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85630c33cb4c0ec6a482317d825de7dd864dfc1abf5642f7f91212d8139d7c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146069 Malicious code in perseus-blaze-ganymede-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c36548131bc59eca950e04d1b40f3421ac426a7189a8aa205124a8688d65eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...