MAL-2025-145196 Malicious code in mui-carpo-publish-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2be34a3c332013cc6fbf0b15eebd1688174c135148bd0bc0053a46ddf30815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149452 Malicious code in wezen-capella-release-it-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d598619f1bafc4a144ea9b4ae5909cdb7e126952c9f3d57b5ecbc92654451586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147742 Malicious code in scripts-pino-event-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128e90a0f35a135ee0249d752b33a18aaea7dba4c4b0e42facd5a5fc7438b978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141786 Malicious code in dotenv-winston-yakutsk-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f6ea4e6b0a8701922666979f8e779420a41717c0e1c8ecd5813d041422f043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148821 Malicious code in triton-pegasus-less-loader-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de31480a225cfdb025681ed57730f33c5be84210ba940a9c5001e84b76619cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149302 Malicious code in wasat-scripts-ariel-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820a675b2d5c57372b0369552e6b26d05b6da7a6a724eceda1fb154d9518b211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141635 Malicious code in development-taurus-slidev-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475374ffcdc3aaaee37f7841dea13ea7b237d1cc81ff7123f954064dc69be944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144870 Malicious code in metalsmith-arcturus-chakra-ui-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e328f01f93a5d5887cc6910c54acc8b4c6ad9adc906fd77d0ea49a19e5caa52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144341 Malicious code in less-non-blocking-run-script-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8eb2c157e35b8e588e935fc40fe578116e2c12180c063d5ec26c9550c7c6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140782 Malicious code in chromedriver-relay-sirius-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f007104bdb79cb21abcbf80450b58281ce1abe552ce9331e05018b461a34546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146412 Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144847 Malicious code in mensa-deneb-global-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94006735c0fb8be6b84ac51781bc561692d741114695724b97d8ffc837eca3c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148857 Malicious code in typeorm-subscription-perseus-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415c773aa1dc50151ba01c4398608c003798f40dc243bdc6b0c1f8f32c41d265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140741 Malicious code in charon-yakutsk-elektra-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d980e0c9ef55991ff073ec09e7d4ea3a2e38daafe740bbb3e0f77b0e64de402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144669 Malicious code in magellan-toml-pyxis-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6dc533b7eafd1a447732d5171a98cc252177054638dda40dfda403bdeecec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143850 Malicious code in jasmine-draco-winston-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ff5a0f28a6222a7d93aa808e220ba1825c5aa59001690edf3821026626b821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145813 Malicious code in ophiuchus-duplex-koa-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026985088b076b41d3553a135400fe4e6195e5a076210af526056f647ef5ba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141451 Malicious code in dactyl-proxima-xenos-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd98d2a90da565834b252f27ed28923a8f160728c2a20f669acc1d5c4eff4edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139242 Malicious code in aether-sqlite-meissa-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29327f59a8318f6abc51bcfd6abe17a7008f1530fcf43b381c55f14e7d32ce27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141238 Malicious code in cressida-mocha-magellan-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b92ad39ccb22fe52557c637972644fce9620f731d30fef074566a3a82f31f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...