MAL-2025-144306 Malicious code in less-avior-cluster-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b87b5755da3a2aa56d12c98d5c75a72ccbd02ee573734ad5fdd4006af68af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149273 Malicious code in warp-nodemon-spectron-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d8eacb40b0ab0faff3c844170d36f1d29311934074d06fa9b96c885a13ecc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149213 Malicious code in vuetify-loop-convict-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f0e13049c0859e3dadf910abbac1dcaf26e8a326d775432d744e45fd8da3de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139170 Malicious code in acamar-css-loader-style-loader-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3ed716972d5290f3c88b1d1e9ce21f40cd4f788fc0787cdad21f76eb2590e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147885 Malicious code in sequelize-webpack-electron-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c6cef0d1f5fa1940739aefd12c411b829bbad3d9b0e3e28cb1c8356f08516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144852 Malicious code in mensa-frontend-sedna-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53665ead08c8ec17b51688daeced105daa9d1ac3f82de921c27b8b3a6d165b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144851 Malicious code in mensa-foundation-apex-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5be0fc327e8e38982be98ae04183db050f3f4b08c7cc0af9727c9c2239019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139863 Malicious code in babel-iota-command-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4053b964c04b56158ec8a42e3d4cdfcdd483167161fd27455c1a449b7b31160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143455 Malicious code in hydra-sails-jekyll-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19940a1065baf15cee8db0d01a56f9abc980f3d4d7673e36aa7d1e8a696b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140807 Malicious code in cli-passport-iota-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1c96bbd01bc353cd4d6dd7efc63eb0ebf5878a52296eae35df15e5308f6326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145773 Malicious code in octans-juno-magellan-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c8055fa385eb1801b30877d2f32660100e939a3a9190474814127bda71f996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141909 Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139426 Malicious code in antares-nuxtjs-xanadu-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f174f64eaf238a88acf650289df7e20113ffb2c14d336a40eefe4f53d6f3d4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145157 Malicious code in mongoose-jovian-prompts-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfc21902cbbe288d44e67e91822e196ee14eb461970003305eba5225b5ceffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139620 Malicious code in astro-xo-dotenv-parse-variables-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35025c75809e93c6eb18d8244997e73711a516b1aad530245426a512afb850e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143511 Malicious code in ignite-cosmos-nova-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdddf260c4fdc700866bb9a9454dc8bb26b7025a28c621db874b244adb44c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141901 Malicious code in electron-builder-galaxy-xo-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983d68e18af0c9e813a4c53e6575cb1fd6bb2c75a355ca8f5aafe8afad1b2344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143110 Malicious code in gulp-await-antares-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c25349f10db35ff11b0cf94364dc21cb5982f02a40ff0ff3feeb8acd1dc244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-heka-phoebe-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e78cb483a820d8e1e8684031787f848f86aacfb5b8fd42e52305de62c17bdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-lyra-stop-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de05007ded0357f96c6580f461bd2d5f802efa82ccee17f4206e5a4433c0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...