MAL-2025-146545 Malicious code in process-airbnb-ophiuchus-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1fbead48529be1f17d300bf0b47b2d8b48e21e46fd428594c0c40900d108cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142847 Malicious code in gatsby-postgres-eridanus-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31088c5e40eb32e04e28df8d411cb3a4f54f62808b2ca0d838d99084decbb1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146155 Malicious code in phoebe-less-loader-miranda-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ed1973c4d5e23397b4caa724b6fa55067f94cee4cce94893b426544617ffa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146612 Malicious code in procyon-quantum-ganymede-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184b056f5fa6c8493f7d18673a4bce96732448062b2c6cf87205a3b11cb6d948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143282 Malicious code in hercules-fomalhaut-chai-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f39492099e5c35700f3b300efb4232b727c56c7bf176574b232c0f5d7d127f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148786 Malicious code in transport-draco-blaze-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207ef2ba0846e5d36f057c85c4930563d7d0622d6842a09081f634ce315dd2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145906 Malicious code in orbit-europa-dorado-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86991b0a2dcb6678d771ebd29e9bac476729c647cd6c41b03821e32b1084eed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147852 Malicious code in semantic-ui-link-firebase-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21be48c246899375bd87162c4751be02e482538515eb7f28d946006bb37c1d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141628 Malicious code in development-query-pm2-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00b132f0a55368d12101518326d44169793bbcf76cc7aeb0bd83264f0b0fb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-shelljs-vega-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744231827bd2a82b04772b377409872008fb9107fe387353ebbc28a5be47aa13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146677 Malicious code in prompts-zenobia-promise-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2597941e827037dc95c37d6ce60f562a41e408f869d847205cfe66fc276023d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142818 Malicious code in ganymede-regulus-nova-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfcac39e2252d7a98dfd7aba9713cfe91f64f7993e4b430534ff58eade376655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145984 Malicious code in passport-less-loader-carpo-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fe9325aa3354258e2c3512db500954ad0ee85cfa988bc0b86a7da175a12025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142411 Malicious code in farout-fork-aldebaran-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108e364c3a72ba84354e451e03216e5cfc26e6c2e5e436f26055b6f868d5a0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145546 Malicious code in node-sass-loglevel-stop-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145900 Malicious code in ora-yaml-yildun-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09671570cc0ec4dbf6e1be086b159d12ee823cd32564bfae08539f2b51fce710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149897 Malicious code in zephyr-standard-arcturus-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfb0d4f3fef5875a28ff7fe0d5c62702914e16fec1826a64f35118d8a99b928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147837 Malicious code in semantic-release-sass-loader-commitizen-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4674a8c00b8aa7f7eb8e8bdbc905e54e284119d17da4639e07eab14a901585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148962 Malicious code in uninstall-magellan-enif-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b973d5193b6b7d80cf9e96848af3716b89f277d301631075300428ef40ff5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148586 Malicious code in test-umbriel-postcss-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653aca1f1686de272649e61e1bde312c3bf99f0ef8ab440834e77b4c521883a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...