MAL-2025-146571 Malicious code in process-spinner-node-config-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10975cf9d208a454c4ec8cf4c7efbfe081c6fb8ff9695c78c35d806391226c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141901 Malicious code in electron-builder-galaxy-xo-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983d68e18af0c9e813a4c53e6575cb1fd6bb2c75a355ca8f5aafe8afad1b2344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143228 Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143110 Malicious code in gulp-await-antares-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c25349f10db35ff11b0cf94364dc21cb5982f02a40ff0ff3feeb8acd1dc244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141790 Malicious code in draco-callback-gacrux-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea8ba295da82ad1827008afbb037b09bcea5cb007076459638f4ec6b024ec56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141836 Malicious code in dynamo-run-script-nashira-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7361ddf24b24372d3f7d805c9eb58615f9f41cd1281ea692b6ebc64d1b3c543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145427 Malicious code in nextjs-xml-yaml-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0671b2be9d6650ff8c43e98f38d0c53b0646276240a6657802b68ebbc5153381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145653 Malicious code in nova-centaurus-telesto-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bbc66b20d8d504c89d9ccde8e832f98bb379a688b9c04e2ed6dc9641f1d34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140447 Malicious code in carpo-kinetic-capella-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36738fd5391a2e0a3836541071bdde4fa6d1a86665a79160d7c8262aec63014d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139648 Malicious code in atlas-mdx-pyxis-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5d4a569c36cb93cfe22fb3e8dcdf66e0ee3ba72263a1ec085f04238964a5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143318 Malicious code in hermes-halley-semantic-release-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f4bf20a63aa1206c571e19342f1474a9c38e5a1ce3b738b8fa656461386a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147502 Malicious code in rollup-magellan-hapi-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3490d9c59832ca44c7885eff71bfbba3bba091d61f91ffd6962dbd3829a1f92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141203 Malicious code in cosmos-commitizen-quito-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d396766edb0e28e3c059fe2e8744a122fa7919dcec485819019662e51aa0af36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145133 Malicious code in mongodb-materialize-lint-staged-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143e480522b9635afef9b96a04379caf8617f11f48a49d6deb174d2845d3e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144396 Malicious code in link-algol-nuxtjs-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b859eb9933bb6f0230d1839ca2c981f687fb0cf285bef87f4eca1f31d5883ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139426 Malicious code in antares-nuxtjs-xanadu-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f174f64eaf238a88acf650289df7e20113ffb2c14d336a40eefe4f53d6f3d4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142159 Malicious code in eridanus-wezen-module-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db08aa8da6ac73487e2363d886d20ce680b382956c29cd219ffbbe067a61d4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-dynamo-draco-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4159379b4e08c7c6bd86618d3fa0991dc921aa71fdd9fcad571592d2f5873fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-spinner-node-config-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10975cf9d208a454c4ec8cf4c7efbfe081c6fb8ff9695c78c35d806391226c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-sails-jekyll-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19940a1065baf15cee8db0d01a56f9abc980f3d4d7673e36aa7d1e8a696b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...