MAL-2025-145065 Malicious code in mocha-aldebaran-nashira-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1575e1db5935e5a93f31d629ad6daf1a3a9220b1bcba15d162499b8e542dfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146908 Malicious code in quantum-materialize-sqlite-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ecdc85046977f03c2dffd2a11621e0afb79893017306e4ee419e68c785d6ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141341 Malicious code in csv-build-rigel-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6245819924dd41e20fcd430304bea0672809ebaaf79c1bbf49bd4d0f7caa6580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149494 Malicious code in winston-gatsby-zenobia-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4539e20771a5e14a396382185985a89fdd823182f16cf3fe399f24140d7e8c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143190 Malicious code in hapi-meteor-chromedriver-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33eb4d562c669c05b1e28cb2ae849a179412bc5bed948bd6a294ab59ee6fb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143477 Malicious code in hyperion-hermes-oauth-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac0492b74e5b2ea4569a72ef3f1cb2e2b3abe987a865f7fb22505c6071ea3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142269 Malicious code in europa-google-typeorm-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646c3cbb9826e253ae7bd67a3f6e6c0faddb21b017db2b59cf241dc532bdd262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144483 Malicious code in local-callback-miranda-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cd4f765265e09e0202f01e90d9d9707e3c457a83a0d8e45c3fd3ee2443f5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148234 Malicious code in sqlite-orbit-xenos-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c86265633b4b5b2fd5f73dca2afde3e2809e8e36c6b6783188ef1057a4bb075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149447 Malicious code in weywot-triton-wolf-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c76a23fb4b2ec2a76ff4c94f687642511b026eacfe0b07ee54c8f8ec80fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142821 Malicious code in ganymede-sagitta-mui-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb085ce71feb6c66240d4895529a244af49df4f259aa4e0385417f3e708524a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149303 Malicious code in wasat-terser-sirius-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56799176c6615904f4c2fa7cf443e635efe39e0b174d0f4a167414ada64497d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149068 Malicious code in ursa-phoenix-webpack-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0778f1068026d84c80059775ace98837d4c0ad76ac7c5bf4886c84953646e947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140519 Malicious code in celeste-pavo-sagitta-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843f2c4b1603c2df6ce963cf271709d299c53464b9cb23dc1b53e9310420c00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141059 Malicious code in configstore-playwright-charon-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d23e4681498a17b8540942a340a8b572177655a82088cfdb027d1b5ec94388d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141612 Malicious code in despina-zenith-cluster-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afac8d96a14b136b5414f2059892e47e4d6d250979ed427ed759b823318e7a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146870 Malicious code in pyxis-antd-venus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cdf93349111eb5fb097432eab96ad486bd16e7b12600203a2e5c3fb9b07aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147022 Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146455 Malicious code in prettier-await-sedna-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da20979527e65cdb03261ee8581c9c8260077ed1257406601373d8afa2819e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145444 Malicious code in nightmare-quark-cygnus-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91f4f0b9326fa7246f0c59ab13594a2ac81a525239f0beed531ef565fcc2079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...