MAL-2025-142142 Malicious code in eridanus-blaze-selenium-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ca898291f4cd05fce6b0768f8f6ca08ffbec4dd3bb7a9699d4b2eb9584daec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146925 Malicious code in quark-galaxy-phenomic-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a4b1f7525377ddda748540c92b04a6389627106af25100a29519c83625274f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149290 Malicious code in wasat-forever-frontend-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc2c3c62e9ed2291ebcb25f23e8a540fe788c53040c58fa9c4661bc5419b6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144345 Malicious code in less-selenium-sedna-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d50b75b55fbffd0d612fdd779f342c49307f72c16e84063f96127158c2683e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139195 Malicious code in achernar-draco-redis-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6bbb2ee0d463c7b05d8868a246ea77058a8af3bcc73db7f0edd475dd843324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143460 Malicious code in hydra-uninstall-cli-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8264502c70e8c00058aa29c0e3045603989b2184e7508d6bea60d5a5b6d037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147034 Malicious code in rate-limiter-cluster-react-bootstrap-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5333dc0e57d62591cfef78386ee083234837b5301edaa9eef17a22523a23050f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142106 Malicious code in epimetheus-repository-package-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fc976d3ed6b582841dba0a53f2ac7f4e88026b21109e58de73df97556d4ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140914 Malicious code in command-morgan-yakutsk-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da47d74a630343aea88824f76517e4580ba986a5308298ff9c91ea0dd53101f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139306 Malicious code in algol-rate-limiter-capella-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ead611eea8dec086e85c8c2f15efacb826f87c089032789ebccf4bace81d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140682 Malicious code in changelog-sadr-enceladus-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3780efc712ce8bcc39951a84d27f0638a6df256d941f660efc4901d9ccf7e300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142666 Malicious code in foundation-antares-yaml-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c13361cd8d538077dc2c193291919f1787c6e62fcb69632c5431036d2d5186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148182 Malicious code in spica-terser-rimraf-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85c5ae642215aab8b0b119876bbc8656b8061b80381484e9e2b94aa377a65f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143359 Malicious code in html-webpack-plugin-dagda-axios-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd44a0f3438ed033d971d6d6adc6c38cdca7d0c501da7a663d61e6e037ad2b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144538 Malicious code in loop-xenos-config-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572238a84327d4cc87f954bf26a61102ae7406d29afd2f45bea34c346d2ecdb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143895 Malicious code in javascript-websockets-neptune-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40c1fc54cb251468d40fb099bef3a0d38a64ef7923792843c8cd11d5e3554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141152 Malicious code in corvus-enceladus-aquarius-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c6214d745783ffb3368fabf4253dda220aaad042ac47077fbde974d840095e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143815 Malicious code in janus-lynx-nebula-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c58283b03b07b8dc5e0e6a679d5e9ea4d0b397a111371b7e52f2647e692d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148887 Malicious code in ultra-auriga-gulp-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b10127eb6bbd47a6636d78d2cd1db35c4ad4337006d511d902778ae0ca0b050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146328 Malicious code in polaris-charon-delphinus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c0f4101841eef379d3eac01b8a6dff8b51c6b61ac857ac5a3fcb6720622993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...