MAL-2025-144236 Malicious code in lacerta-deneb-react-bootstrap-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee4a9712b532e871f7b4ddaa054d992da7855fe931e1bc6d0a47c71aa8e651e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141814 Malicious code in duplex-link-test-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d73d968a6c8dcefba38eae6fa12e0576d000367bebc2b6d119b6fd9765b76f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142134 Malicious code in equinox-sedna-lacerta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1e497c4a4276f35faa02b0056417115ff74a8c7698fcf9124ddd14717dd13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144917 Malicious code in meteor-janus-await-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc9b9ed01714f5ed46a16d16f8f9fecdea619e151dd7ff7dfb534084044ba4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145848 Malicious code in ophiuchus-vega-xml-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf5930561813e8034bf3a62617cd99f9c8522d2a4e61604426d8545cac757a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143636 Malicious code in init-xenos-forever-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037cbe531b734ea1d67a651682ecfb3115ec8a3abe390a6a187266e51cbf4a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143183 Malicious code in hapi-hyperion-corvus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f90757f777313f495bbab629a08d287877e9996063f135538f6c4a9ca5cf61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141883 Malicious code in elara-mini-css-extract-plugin-lynx-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0366b7f17be78889c22880bd1190e5627d5bd6527dfbdc5052a910a723993563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142324 Malicious code in event-sedna-elektra-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aaf62dc662a6d8b1068d1c49bd2b9ec972d870646a3b2987a8882ceac957b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144915 Malicious code in meteor-iota-ophiuchus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b0ff1cdf2157479d762189676161efb8616723cf3c47dcda0abc29af08734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140707 Malicious code in chariklo-private-phoebe-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf258b2fe854550f13fbc74482017621aaf80f8bd14c7920dddaaba3a1cf2e87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139337 Malicious code in alphard-pm2-centauri-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb818ecdfcf56998d260bdb19662ec3fd60998067d6615a5579a6ce41d7dc8ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139704 Malicious code in aurora-perseus-publish-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1914b6c4e9180f53b91bad06b1b25379fef2eb403398388b7a0665a9004acae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146192 Malicious code in phoenix-achernar-nightmare-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f07447b95996044d818408fd7d4494a3352f8ff4efff391f36f14aebed84e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149154 Malicious code in virgo-farout-cygnus-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f515381d2ed9b5123eae6a36d19639f2221e8136e2dc3aaa2fd13e12ead6baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147096 Malicious code in redis-atlas-docusaurus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc6739e1d77dd79766a095815817023e3d3a697933689bbea3e6ae70e215443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141877 Malicious code in elara-hermes-element-ui-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28265b9fdb68bcedd5c210e9a0e16a40251eadf6018250aea47df9be29877f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141531 Malicious code in delphinus-transform-event-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0752736ff183a84118d0c03070f6e93fb04f2b02c74e99d9c655488c1f9a590e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149558 Malicious code in wolf-pm2-nightmare-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8439e7b0224db89fa9f40bffec37ff29001a3cf946650a27e3eb804f62c15ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142536 Malicious code in fomalhaut-bulma-markdown-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3350946149323bbf4d7d8d1eb5a5f066646b7b4ccdf914d77b50d51426a04ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...