MAL-2025-139374 Malicious code in andromeda-config-eslint-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c85ea7c1863642aefcd2294c864ad7325e4f249478d498aca5a7d4f6e06a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143574 Malicious code in indus-relay-nightwatch-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cbfc7dbd014955090a7ff9658944678f02935f0e7d86b417c54fbd53fdac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146627 Malicious code in procyon-xanadu-carina-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6470c43bd30eb473cf516e28c2579ba27275297d6db3414d57ef6451ac3fbe11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147787 Malicious code in sedna-postcss-gravity-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4518a1db3516a32330ad1a98f283c25f4d297b1556347a4e89b67adacb66de53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142481 Malicious code in figures-scorpius-gravity-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e254e05123db98929538092e918e04c4e597fa8cc159bb076609d7276a8c7fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142954 Malicious code in global-zenith-child-process-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc3e9083ac9cc969092f7cd408f8a229dfb5f42f62b6082200569f22f0c57fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148910 Malicious code in ultra-stream-cli-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143848 Malicious code in jasmine-carpo-scorpius-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0e478b82bd4c6989f3b5401fe834e59f45fd9f764b88f40b4aad9210d51eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144092 Malicious code in jwt-wolf-solis-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb344acbc26490eee3304fe44f348bcab567cb4f0d1960e50a2708cd20e0220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141508 Malicious code in deimos-webdriver-manager-public-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc1847b052c14b0eca3479e9583bc1ade4230f8c35df49331801119ea3a3f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146313 Malicious code in pm2-sqlite-got-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538eb2a77f07a4d82c2dc92a67f5740e341cb37992ad8e0cac69335ae315904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146239 Malicious code in pino-pretty-less-janus-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9d6033619dd075c66d22a2b5e6f8dff5062b06e279df511f1244751d71c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140682 Malicious code in changelog-sadr-enceladus-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3780efc712ce8bcc39951a84d27f0638a6df256d941f660efc4901d9ccf7e300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147775 Malicious code in sedna-metalsmith-vulcan-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bb66a7b11e61ba0ffe2e0d0c433ef34fa0d555fc5381ee4c86e3f70147a06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147484 Malicious code in rocket-ultra-playwright-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4b6491f15f314eec05abd224b0ef96bb4fb0502115124a5cac9421c3fc8f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144220 Malicious code in kronos-grus-iota-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db435aa072da87e3cd2d851ea479363d8f2614b417ea1a476c6693b7e935fa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143676 Malicious code in install-europa-aquarius-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316a3c1e5a59dec9c0fb21e4d692b1f7f1fa2093ace060ec4a6bcca191b15035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147017 Malicious code in radiant-nightmare-xo-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c61b5919ccdc6ceec342de4c981a1542a5edda541b184e746f033085bde9a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143910 Malicious code in jekyll-nodemon-lint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eed5e8ff22cc9239cffa973753ab2ed9b0ef01e31a43a734b87a8a922d04e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145245 Malicious code in mysql-farout-morgan-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17d6cca1564673afeeac69a3122e8b70e262fad2863a5d0639b1f4bc676a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...