MAL-2025-147404 Malicious code in reveal-md-celeste-ariel-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8470d16e3096896180d1fdec498c433326fb2287ef760464e34c1c84caeef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144379 Malicious code in library-magellan-telesto-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d155bb64f62032962b5f0496237c836db5c08bdb318de1c08938445eec8bd254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147809 Malicious code in selenium-pm2-titan-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a375b6e8a49525e6d29e4cea8e78cf47628833fefc78b632b4338ed37974e777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139240 Malicious code in aether-promise-airbnb-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52083ff1210db5c0190ea675543f7b26ee8b659b12480c04548f5902aec8103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142669 Malicious code in foundation-canopus-charon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ae315c9f2f6c6650ed867026c7352f7ad0f33a06976f649b4fa2cf022f67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140376 Malicious code in canopus-writable-acamar-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d3dd08d49d109a4903d040371041d4d3b34ded3e4e3be67ac6828ba2fb33f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143005 Malicious code in graphql-loop-module-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86ea94a77cb0553e830c53e35a9681d968d5df4e3cb1286d1736152b291533c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144140 Malicious code in kaus-dorado-hyperion-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8659173b63fc0521c5da9433000bf134a4cc63464820c15a17a0fabc844a3ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148366 Malicious code in subscription-request-koa-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c68b8002383770872ccdad0a33557462f10d80f27bd85d0cf04a9636bc71571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146239 Malicious code in pino-pretty-less-janus-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9d6033619dd075c66d22a2b5e6f8dff5062b06e279df511f1244751d71c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149122 Malicious code in venus-sails-betelgeuse-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab7dd16388a93e8047078995ecb25ef16b1db8fece43c462fef99199b710136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139321 Malicious code in alphard-eclipse-deneb-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669350bcf59eb37c221ae4778203358027c54bfef1008f0df4c38b211cf9331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148819 Malicious code in triton-html-webpack-plugin-semantic-ui-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef6de5e15a7da6975fe2005dccd99ac7c3db5552e4b587476a8165581e05b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147218 Malicious code in release-it-chai-framework-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fc75454b4d7fb05b9e18236f66515eea7bdf45689c68839a7279679c7d7067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142879 Malicious code in geckodriver-process-module-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b003134420a4f6d79fd4f63c839be965746e5cf508de21a4f403624f0104e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147401 Malicious code in restart-webdriver-manager-websockets-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6672413056f55ad45771a84dfcaa8138e0afdcf02f722e2fc4a26b50f7c29a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147558 Malicious code in sadr-corvus-canopus-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb31474b1632669b500dfc33b6e71f18477eaec8f39b97ad1c17f26067359883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145289 Malicious code in native-eslint-plugin-style-loader-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695578aca503670b9eb6a321181bc50f0975204771e573cde2aeddbbde25ea65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145253 Malicious code in mysql-lynx-bellatrix-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856a800db8c30ce2d2de043e462c1171f0fd09be9141a40dcf6d159afd069206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144513 Malicious code in loglevel-lynx-rate-limiter-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d7323270e59e13296ff1331364ed8cf765141361a3ac7614709d7f67298830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...