MAL-2025-146751 Malicious code in proxima-xerxes-await-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5410adaf1035021a86a15b259d7ce60dc0365d4b361a661abd6d2fcce409b986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142854 Malicious code in gatsby-vulcan-lacerta-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee152af5e0dcc5068bfc21b3ba72197064d1a82c2e97851c04f94b589799f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142142 Malicious code in eridanus-blaze-selenium-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ca898291f4cd05fce6b0768f8f6ca08ffbec4dd3bb7a9699d4b2eb9584daec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146313 Malicious code in pm2-sqlite-got-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538eb2a77f07a4d82c2dc92a67f5740e341cb37992ad8e0cac69335ae315904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143031 Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149589 Malicious code in xanadu-callback-request-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cf5680828ccf264b0c7c676df6028edd1e2c4f2e5ca2153794fe92a09f8f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140341 Malicious code in callisto-loglevel-electron-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db4a957b6d9ec52cad85ef2144c73b018c6121df283ccd8fad94540c5c1f919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149203 Malicious code in vuetify-blaze-wezen-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acd317c6a436af395b26d7399e04af36ed8f51614a95c8d7125b905ab6a7f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144574 Malicious code in luna-oauth-ophiuchus-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ecc833ba736decef4c92c05371e584d18d0590acb60c3238514bdd067866b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148418 Malicious code in sync-centaurus-gacrux-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7271004506e4bf8a34d65320aa246e3edc5a000dc3b3ecd2d0a7be93fd94c794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140914 Malicious code in command-morgan-yakutsk-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da47d74a630343aea88824f76517e4580ba986a5308298ff9c91ea0dd53101f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143910 Malicious code in jekyll-nodemon-lint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eed5e8ff22cc9239cffa973753ab2ed9b0ef01e31a43a734b87a8a922d04e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140994 Malicious code in commitlint-readable-standard-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee74897cb470305c5a181b7888799edaf5856fa3361abf88d8a8e2f0f78bbb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144100 Malicious code in karma-deneb-eslint-plugin-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca28c4630f7069c8ff7f629c225a8554f422bf681c109a76cdbaabb1cc4edb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143460 Malicious code in hydra-uninstall-cli-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8264502c70e8c00058aa29c0e3045603989b2184e7508d6bea60d5a5b6d037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147034 Malicious code in rate-limiter-cluster-react-bootstrap-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5333dc0e57d62591cfef78386ee083234837b5301edaa9eef17a22523a23050f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143975 Malicious code in json-impulse-websockets-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b4f7f43fc008c37e24812ac645b40a06a9a8604e0b3976e987f99ab9d28778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145352 Malicious code in neptune-aurora-backend-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfb10cac4b5a1dfb6a498b2742fde2ada9966efaa48a9f65f9142d0b3af950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145174 Malicious code in morgan-eslint-config-dione-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15574f1cbe1c74fe0096a4b4a9baf5d35175ed247c3047b558a55689c3bd8dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149636 Malicious code in xanthus-restart-publish-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e458b053e98b36d56fb1199fdeb1076d014dc681e78a7f0a8b13bf328589204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...