MAL-2025-144135 Malicious code in kastra-version-sagitta-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3ad7629526512c8e8094dc1e6a642a0a45b7f8f0b9d35bcec3a523d57cc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139337 Malicious code in alphard-pm2-centauri-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb818ecdfcf56998d260bdb19662ec3fd60998067d6615a5579a6ce41d7dc8ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140242 Malicious code in bunyan-gridsome-init-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e117de56da81c5c34a98930ad169862d0bb5f3bee646ae6e54accefaaf814f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139619 Malicious code in astro-vortex-commitlint-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832fab4734976965417e4c3c3987afcc42a99c3cf032927a927552d6606651c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143586 Malicious code in ini-delphinus-fetch-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d40676848a894fe55a348008ca0bd6c6005b42422e1675050fcd0adb0f43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144943 Malicious code in meteor-xml-equinox-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83078b1301d20295a327893bd0655755d15c5a6e7d68e8152651023943e274d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142659 Malicious code in fornax-uninstall-epimetheus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d813f7d77d1e40e349270d27bb8fd5e7bfd218b0b61439723e65f93a8cba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142461 Malicious code in fetch-virgo-pegasus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140707 Malicious code in chariklo-private-phoebe-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf258b2fe854550f13fbc74482017621aaf80f8bd14c7920dddaaba3a1cf2e87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148904 Malicious code in ultra-playwright-flare-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc6a1c7c442c53b194a331d867177d214e9c376b7f6a3f4abcfc5130d46dba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147243 Malicious code in remark-castor-ophiuchus-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9974665bae787c95a53b225627dbad7b63f5036dde9ea0330b70f1b73b5aa9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142530 Malicious code in flare-koa-version-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743fef05b826eca569bd55c8b8e63b265ee14b3619c017ffaf94b5c85fd9cbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144278 Malicious code in leda-koa-dotenv-safe-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808c73d9e9f389030423bb79948118805a5bdf318cf7822ce009acc6fb93fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141883 Malicious code in elara-mini-css-extract-plugin-lynx-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0366b7f17be78889c22880bd1190e5627d5bd6527dfbdc5052a910a723993563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146192 Malicious code in phoenix-achernar-nightmare-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f07447b95996044d818408fd7d4494a3352f8ff4efff391f36f14aebed84e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139987 Malicious code in betelgeuse-jupiter-zenith-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195f7119f79b9010d1b15cbf53b4ec46996086f8d87b6c15ed3b171a977b0549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146435 Malicious code in postgres-hydra-weywot-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f121b1962f33f6f178f0b9f8dc9bee590afdb80f5fcc6e4a087f70a9f74232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143382 Malicious code in hugo-chariklo-oauth-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fd7d1fd0275b32a4d80f5e3b726a6742963052cd0743ae6a7dc530322ef608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147096 Malicious code in redis-atlas-docusaurus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc6739e1d77dd79766a095815817023e3d3a697933689bbea3e6ae70e215443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...