MAL-2025-144870 Malicious code in metalsmith-arcturus-chakra-ui-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e328f01f93a5d5887cc6910c54acc8b4c6ad9adc906fd77d0ea49a19e5caa52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142555 Malicious code in fomalhaut-ultra-google-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fcbc513c0a9967340a8bd1620fc65e6e92e59d328195923c5bc0665411f5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139428 Malicious code in antares-pavo-sagitta-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb91c966e9c686f36a11e9fc5d3120d55ab7e432bfe20b1f89bf8a88a5c7fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142269 Malicious code in europa-google-typeorm-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646c3cbb9826e253ae7bd67a3f6e6c0faddb21b017db2b59cf241dc532bdd262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146039 Malicious code in pegasus-iota-link-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdb3ab0c97c2d7514836330e92608bb78a25f46953d22332cb32ce438a1e7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146455 Malicious code in prettier-await-sedna-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da20979527e65cdb03261ee8581c9c8260077ed1257406601373d8afa2819e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149495 Malicious code in winston-got-sagitta-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82463284e6d68558aa7d4c54fff9d4a660f92325d94010f8983fa28b8bed191b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146726 Malicious code in proxima-oberon-magellan-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0756d527441ccfc12f2511749f3ee90f35af9639574db1d5831c61e0e56502b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145059 Malicious code in miranda-stream-node-config-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10f00153d17388eda7368ddb1063159fba592d0095acd6f9565936c4911657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142378 Malicious code in express-grunt-transport-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1983442e552e785211f2494e7a99bd6132c23f905079524cf38ed39132e26167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139616 Malicious code in astro-redis-telesto-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace80ece3eb943681bffd65c77aca3fa03730f975eb6c4b2df89cf6ca178c3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142548 Malicious code in fomalhaut-phoebe-mocha-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0c65dc66483e97c54b8468b7f9233fd0f70b6e6e03353e421697a43a22ca46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141261 Malicious code in cross-env-nodemon-sedna-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7316b299b527b2a7aca15f930a3fdfb9a75ba8c6418bd1cf9278ef08797cd08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145705 Malicious code in nuxtjs-grus-heka-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aabd30743192b5db4cf889cca1641cc79c387fa9213807598d2977d5bc2769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149252 Malicious code in vulcan-reveal-md-ora-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2277bd541ddffacbe9f8d9d3f072882300533890a4b3807ec413ee381b2b8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149019 Malicious code in upgrade-meissa-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7aa0eb53f38046acb51de930d7b4ee46451b9bb5195ebda094eb86331223a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145013 Malicious code in mira-perseus-delphinus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370b99d13baa843ec3e6b05367062a9a8f526f0778000ba19ff3e22729a31288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149638 Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140831 Malicious code in cluster-markdownlint-equinox-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c171761f3cbbf27925b3aaa8a534f93727568b8a0eb9097d587828f151e01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141643 Malicious code in dione-cluster-hexo-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8497ec4c25a6c9e25ffa655c0a28de102cd03a2893bad483366653df906f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...