MAL-2025-143813 Malicious code in janus-indus-slides-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef056ed0baca29f83009d0e395c62567862980b09b39b60559331c2dd19576e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141528 Malicious code in delphinus-octans-process-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68aa0ff87a380b866fc37af33622117ba664e42555d93a87ea35d500cea9712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142013 Malicious code in eleventy-spinner-gemini-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746ffb5d26ec0c2beb4033b4f6c4859ebbc33a46b29f81cce2bc4daf1967c915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143204 Malicious code in heka-exec-terser-webpack-plugin-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459a8911d404ea550d39c9a03962c94d442f59f3731ba158658f93ea0e9d1729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147410 Malicious code in reveal-md-ganymede-chromedriver-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bf8e69492fcec22cba663947e29cb7dbc03cf4ad877ee0b9b0db4d8dac3f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146297 Malicious code in pm2-eleventy-google-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51d1f7de0e0269af708961d18f2d108d52be80609f5536d347cfb63070de448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139658 Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149626 Malicious code in xanthus-hapi-buffer-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daaa6f3120d4666fb5bf52550f2bea95213da7f8afc741f1360119204f1bfdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143562 Malicious code in indus-commitlint-config-angular-cross-env-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24bd98a02c55efc44bd67726c44dd41c85ad6d1522918a7a14153dab3d42d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139424 Malicious code in antares-nebula-webdriver-mocha-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c754df984c3ca6bbdfc1ad47c5181c9fb48593fe4212e74086a8e5cf186b6f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145707 Malicious code in nuxtjs-hydra-betelgeuse-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 818dbd79dab4e20db345cb9b61bf63e37ad4e1004bd2775e6c89313fe9e80290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141926 Malicious code in electron-phoebe-electron-builder-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80972fc2e361fb8c4448eaa72d3719327b32fd4539f424c63b7b1874f596fcc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140818 Malicious code in cli-zephyr-pegasus-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97815fdda06e8a45bd8006981b533a5d6463aa60146347ccc5c014096f451520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146943 Malicious code in quasar-cluster-deneb-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6606800f76541e00a782f9c5c9f56d495b46fd423e3525710c8c3ad613f6270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144419 Malicious code in link-passport-prettier-plugin-markdown-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cbb9644d6e2a6ea49c021e47526c36a9c49d25715d531b0e999691733fd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148834 Malicious code in triton-xml-ganymede-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c77b434f8e70b60ed9b41c1eb361d6c28e453ad16bb1bdee7d41360d322ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147952 Malicious code in sirius-foundation-sagitta-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3ab63604cb13b980d2d70c5b2c199f034d114cdcf1aa758bbe94394b8f2ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145245 Malicious code in mysql-farout-morgan-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17d6cca1564673afeeac69a3122e8b70e262fad2863a5d0639b1f4bc676a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147900 Malicious code in server-helios-pino-pretty-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028d29159e5f9101d2b2a1a011bb106477bee002fd2bb59461e1830192383036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142931 Malicious code in global-dotenv-safe-mysql-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c214ccb52c4d406e705a660e00408acf6f13309f35035e2ce944ca6a57c77a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...