MAL-2025-146994 Malicious code in quito-hermes-mysql-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e284c810e73524768e435e0193cce5ab7bd48efdced7dbdbdae1e11f48cca83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142708 Malicious code in frontend-meissa-scripts-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7993005ccd89c0204660a1eabf207f62018f8177e86a80e44ab904f81bd861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141631 Malicious code in development-sedna-webdriver-mocha-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edcd3a5638cb84734581316b37ddfc7bb43dfa6c1eb41b1e5f4a1d0cf3402f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141273 Malicious code in cross-env-soap-winston-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c093cbd1ca03d9684a17411c5b102b2d7045783909788e47ba39b5fbfcccb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141995 Malicious code in eleventy-dotenv-node-config-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6740ac3327d834814b3e75c025ede5e5a14ee98df856a144afd7e6997fcbcbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146612 Malicious code in procyon-quantum-ganymede-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184b056f5fa6c8493f7d18673a4bce96732448062b2c6cf87205a3b11cb6d948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141006 Malicious code in concurrently-fusion-init-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447a0dd14642fe214f74258e5f7c9daba2a84c171060af3d133f58a623b6e20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-izar-arcturus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b385d913d938ad4c0aaeb7d4b1c55a678e3179ed9e28052aa5ec6d6b955ea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-cressida-vuetify-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d307e1b33fa1f7f77aae72aa9f324c6b1a79457a5786e8ff424ea0338bf9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145900 Malicious code in ora-yaml-yildun-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09671570cc0ec4dbf6e1be086b159d12ee823cd32564bfae08539f2b51fce710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148221 Malicious code in sqlite-atlas-dynamo-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14187cef271cc4426484306893a6fee37db7948f0787533e5623a7551d59d9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146910 Malicious code in quantum-mysql-schema-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1540831b0f95580f1e8db066bb4dfe5d00d24bd0b84256d15212a601e95c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149162 Malicious code in virgo-nightwatch-hermes-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194145672c05c6097d6bc2b87b1dac601312ecc697460d421408bc530d129cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141319 Malicious code in css-loader-terser-rimraf-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3369b39705936e81e044143deeb3d264e0c799da1d7145d7a34a47964089ea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141538 Malicious code in deneb-centauri-pulsar-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6526bda239de64c4d9457ab972fd6ad08c667ce2fed1a79a3cf3f4a444fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-blaze-zenobia-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41fd4cde87182f18e48fc64a21b8b3a6224f31cfdab55a301fb10c443b934961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-rocket-lint-staged-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f320fb414260623d8c1a526f9f045550a542ff04f19f01905c40b250614400a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-jest-await-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f94094428f0a2150123a27e6aaa31f5343d172db32867c1deedd1ffd7de9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-child-process-supervisor-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4eaf60354d0570e14c670da6c5ea1d1394c86e5490ab4c7cedb36b6413f77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-vega-forever-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705ba1bffe46a977d02c92d5251392b47fa800e7294432d8f3f44f3f5c584c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...