MAL-2025-142425 Malicious code in farout-supervisor-phoebe-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7f56182fb0508ccdcfa89d6395ddf24d4f32bb251f2ace9a58c29d899b8d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142147 Malicious code in eridanus-install-supervisor-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1376bd5cb9c0baf92baabed9c0684dc0c88040e298eda6fe848c4b721834c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148405 Malicious code in supervisor-superagent-helmet-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a59e3ffa2586423c766bb07341d62b23bc98f8b2d7e8b30bdd63d44e487e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147554 Malicious code in run-script-update-tethys-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea68645694de9a182b55de9fa8c58d02c1340608c7676ac3400270fe913aa2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142591 Malicious code in fork-juno-link-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5851779d975f0f23b872722829c51245198fc88dd1c6a17deb0d272d4ece99f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139529 Malicious code in apollo-sedna-jupiter-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d988154295648e02e90f8606fd114f1c15ce7f2165fe2b4297393c771b18ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141159 Malicious code in corvus-luna-chromedriver-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc57845ad897dab7e51dc698f8f4a85f4640e5b4759380e4673f476f8d7a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144333 Malicious code in less-loader-stream-publish-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87848632542c547d5ecef043ccf837f25736a226b95c2f670c701032a0ebabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145140 Malicious code in mongodb-server-yakutsk-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dcaba764b7d0683fc08db311198f703cf88073de862611d3f71439e3a4ded1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149172 Malicious code in virgo-toml-passport-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584f8b619a6b42d51e3495d518d1c3de32ee362ccd4c539987a484b1f3711094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141507 Malicious code in deimos-semantic-release-atlas-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d18dc8dcc795d30bc08edaf90ad56deb686efefb24e1006e8391463234d5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149328 Malicious code in webdriver-manager-nashira-loop-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f6a04ec806bb992913d1853766b213c4a81232fe66336bf4acdf188e33e9c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139764 Malicious code in avior-cz-conventional-changelog-shelljs-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff22f6e1d86aed35355f82b088b7ac1a4a4215ad40bb82f0c8cbe3faae43710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143518 Malicious code in ignite-leda-framework-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8e962cc443d3c769a93da076a5922db0b0a446f38de08dadcd7bf23a644230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142108 Malicious code in epimetheus-solis-perseus-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415a02f6ef7c9186bc59da0060c5f4eb21123c0ea1bd1513028d932bb8964e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141434 Malicious code in cz-conventional-changelog-subscription-loopback-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54c829d1cdf9ebb1940334926787c7630f40138d85bc15a6a2c84dc88a385f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142458 Malicious code in fetch-start-carpo-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2106eb00d769ca277b04d0b3ef98e9de6e44658c92fb811c3c5506cd309666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149854 Malicious code in zenith-lint-local-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec74ec276f823fa984673f06be515e340ea0f44cfc759167248cdfee29be770f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142474 Malicious code in figures-nconf-celeste-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dd2e527604d64e34551faa5600bd57cadd35c29ac58e7f998531cbc0c9072c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143777 Malicious code in jabbah-foundation-auth-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fff1c97910c4a0a152cc3a17478ed0e622af9e547e7e11a92d3795e6aad004b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...