MAL-2025-146887 Malicious code in pyxis-proxima-library-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e290981069fcb3fbb09a26760568a295e5352425ef1a2aba07e44b744be012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139968 Malicious code in betelgeuse-betelgeuse-carpo-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9255a7aef8d17bfbb639e1ed68efc3bb23a1a2f2b680f8f22ad8b517075a3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140480 Malicious code in castor-alphard-sirius-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c805155bc8b2e40df017e26f58e664de20bad1b1e5ff36ae71477544f82c9495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142885 Malicious code in geckodriver-titan-weywot-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edaed3bc26a79eac172ab1ba313845fb14e0cbaf5284b4847aa3eb43b3d53c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145651 Malicious code in norma-supervisor-epimetheus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21559884472e9184dddd2e9706cb4f381d1a1b893b88c58be5f19663ce99356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143602 Malicious code in ini-query-bellatrix-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17868109012618c362d16e0753aafcde22ed72095743ee03fc5cd4f777ae66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139199 Malicious code in achernar-hexo-betelgeuse-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22485d24156f5b7a844676474ff062663cacf70de836551462b306a1bc5dddbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139278 Malicious code in aldebaran-gatsby-phoenix-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35784680b56a34e605ce149c9cfb50e108268e0841aa302c3aea60dc7460f7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145889 Malicious code in ora-markdown-janus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b7bd4b1c1d39a7f7495b0a9cf4b4e469251a3c28e38498d153c59c70b92a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142642 Malicious code in fornax-octans-grunt-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b602d370f1083a15d9a1ec3d3af5636eadc38249b8279136e2dfa493a1c039a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145344 Malicious code in nebula-hyperion-chromedriver-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f0cb38df1a8181ec17f4e0a0c4f4e5d50074dc19faf9a14da0603b416ba956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149162 Malicious code in virgo-nightwatch-hermes-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194145672c05c6097d6bc2b87b1dac601312ecc697460d421408bc530d129cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145143 Malicious code in mongodb-winston-jovian-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ccd23e9b09ce25258d0121da16e8571c37e336c93fd86210692a951a107288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142362 Malicious code in exec-thuban-farout-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141190 Malicious code in cosmiconfig-neptune-public-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe4928a1a9940219865f50a24366f38c974d857bff1aed36844629daf22054f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146256 Malicious code in pino-xanthus-got-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75781e4fdfbf44aaa54bd56aabe7774674004a1a0f8c21d181238759f9a854f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149505 Malicious code in winston-link-sedna-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f85cafa20aa12c12ac18d6450f990058652fe350caf2047392be8836ab59383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143662 Malicious code in inquirer-stop-spectron-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7dcacfa1afed1563aaebc9ab7b548454af8fb4f66f1d59bac91eaefccea02ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145884 Malicious code in ora-halley-equinox-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e17eefaa0049e9ad89efa16d16def14a0dcafe1a3cb50d8e977ad7885dd1feb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147016 Malicious code in radiant-mira-cypress-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff288bd799235397c87385876fbab2931d12fc07d382d64b5053e7de4fba340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...