MAL-2025-149137 Malicious code in version-iota-deneb-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b339f0fa5e97e5fa737e9c1473c0476739056c2201bb00ed06a6ac219603328a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140875 Malicious code in comet-fomalhaut-dotenv-safe-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f68828d1211166a7827a25bbd5da1c86e3d89362eb6275cf0f5ca8e89781b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142155 Malicious code in eridanus-shelljs-oberon-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedf7fcac32902d42c53e87e4ae9c10496ac0ed93504a0123a0f2c6475eb893d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141200 Malicious code in cosmos-blitz-got-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cab308e3dfecb0e0f1d7e5a6ac6a093767de259085409cb5e48b1f410f5560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144010 Malicious code in jsonp-spinner-dotenv-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3574701b933a49c45959aa3568b887dcfd3d83b1c6197131ec3d1479d610ad0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147952 Malicious code in sirius-foundation-sagitta-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3ab63604cb13b980d2d70c5b2c199f034d114cdcf1aa758bbe94394b8f2ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142879 Malicious code in geckodriver-process-module-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b003134420a4f6d79fd4f63c839be965746e5cf508de21a4f403624f0104e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146067 Malicious code in perseus-ariel-andromeda-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de31a6a66ad37cb2e85b252ac93e639aa708db96ee4e4ecea8f7d8775c5245d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148220 Malicious code in sqlite-ariel-spawn-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345720f3836c37e579e5b4f65b8f3644211d05a83b66beeb0d435273f944b5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148007 Malicious code in slidev-janus-aquarius-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ba6f56b7df95c282b16909eb8377d5e194aa02b52d86685443a21590c3699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145468 Malicious code in nightwatch-fornax-vuepress-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2433b17cf8426c18833d2b1c9aff267071d4dff8a860bbc511e84d39887c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147528 Malicious code in rollup-plugin-yonder-draco-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882dd9b292283f0e6f159f85b76503f46a224aac7d185a399da12e6e783d5865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143517 Malicious code in ignite-jovian-carpo-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5489fcc6a14ec6966ae4d1643fad8c37bf6bca505d7659f928e3f7964fad9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142930 Malicious code in global-dione-eleventy-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa86d4174d75787032ca9ad72fe97137a727c350cf3755ade0e4f4408686ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148240 Malicious code in sqlite-spawn-ultra-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be06e9b3e8c2658261f00ccc757cc103e2be3f4c5ae7c655f5dd153755439ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149607 Malicious code in xanadu-repository-csv-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ead5f8503d609c94b195919d9555861782f4245cc4a6fdaf0ee4d636349c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149488 Malicious code in winston-dione-playwright-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2acf1752fd78aafaacb9786f57344172402c394a983d209ea714bb25c15b5cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141378 Malicious code in cygnus-rollup-package-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6d1dd179df2d4f0340eb8e34236ab83acaacdfc2bf36ffeddecd60c721af8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144891 Malicious code in metalsmith-ultra-ceres-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776689ae45d74b271ed19b9bff9e67824bd653c6eb8a6ffe860fe7b8fa4dbc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140635 Malicious code in chalk-draco-wezen-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b6b4cf0c27e8f1ed145b096b6bda80b9337b30903760551a33b4c905bb8224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...