MAL-2025-140447 Malicious code in carpo-kinetic-capella-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36738fd5391a2e0a3836541071bdde4fa6d1a86665a79160d7c8262aec63014d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142117 Malicious code in equinox-centauri-lacerta-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af7e42dd6ecc2d5e444e441dbe9d246c94856bc0fdf210e3b3ba99c7d462551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-dynamo-draco-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4159379b4e08c7c6bd86618d3fa0991dc921aa71fdd9fcad571592d2f5873fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143210 Malicious code in heka-ophiuchus-cache-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a88089822f8c73b5b0395551f87a7a085394fb6497c4c9d5cc2a81edb29f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144219 Malicious code in kronos-grunt-sadr-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77e858e6d1a107decdeeaae11b5f3cac7d091cbd8cf3627ffeb3de7918adf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139224 Malicious code in aether-avior-enceladus-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce1c47ba5445dda49daeca42e550f04bec27ff0a7d15fef9aba199e2ed0641f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149035 Malicious code in upgrade-telesto-forever-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991719e6fabbfb2f836d676ac219365c07b5cf2a8dd616e1734bc8da03db23bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141790 Malicious code in draco-callback-gacrux-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea8ba295da82ad1827008afbb037b09bcea5cb007076459638f4ec6b024ec56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148311 Malicious code in stream-bunyan-selenium-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbf6cfd3f3b1fe6e04e80d1120452bdc3262f19277791c0d067efd9c340506c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139447 Malicious code in antares-vuetify-nightmare-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb05e72399b628edf6a0b1f2964386424efab1b44c0b544971072d2594867b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147290 Malicious code in request-cordelia-cypress-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66fb1c730dec97f29ade6b1d6795405786d119efa2bdade8c8b96b568991474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140552 Malicious code in centaurus-rimraf-install-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a20fc42722644aab92bd2ddc6bca3420470cac4cf0326c16962a9a81849fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143318 Malicious code in hermes-halley-semantic-release-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f4bf20a63aa1206c571e19342f1474a9c38e5a1ce3b738b8fa656461386a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144549 Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146571 Malicious code in process-spinner-node-config-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10975cf9d208a454c4ec8cf4c7efbfe081c6fb8ff9695c78c35d806391226c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141203 Malicious code in cosmos-commitizen-quito-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d396766edb0e28e3c059fe2e8744a122fa7919dcec485819019662e51aa0af36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146193 Malicious code in phoenix-cypress-bootstrap-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a728232962e524201812cf8b81e1af61d6b898e4d49532881d086be26173b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149672 Malicious code in xenon-xenos-sadr-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8462fcddb73bf27d7bcabb1adc1a6ab4a89bb78f09ca7930c977f334739514f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139955 Malicious code in bellatrix-resolvers-inquirer-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858faf8874f21966c54d66bc8f4a8694de8c3a9272f66dd24323ebaccffce5d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147747 Malicious code in scripts-semantic-release-galaxy-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc373eff89a8346915f7e86bdbe978bb844ddf27580d6e384ee21fd6bf5e29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...