MAL-2025-146747 Malicious code in proxima-transport-pulsar-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd5d66b59f878e14ee4cc32f6bb2d9d17b8fac7dd4a593beaa5d64a80e21e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147314 Malicious code in request-sync-magellan-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79f1efc842b2ad8058b2585be7a3aa35dd20a9bd08e234c21471a77b6ad3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141142 Malicious code in cors-vuetify-mensa-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67a4c307c8503a7fe4ecc0e69ea682388112af41d9e1aae223fc7ef001ce09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149037 Malicious code in ursa-aldebaran-phenomic-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5c6621dece89a79d48ebc2def06c13ff71335411f1e0cfa6ce6b1ca559ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139965 Malicious code in betelgeuse-andromeda-supervisor-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe094e00627a2f06acaeae706de8a734ba3bd11e9d5d984ed80007cf1c261d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149148 Malicious code in version-wasat-colors-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92077bdb19785fd529695e468fe325398d83987d559bac3e8199d33baba0017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140345 Malicious code in callisto-playwright-publish-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bea5b7884fedd3cf87fa9645c779ea6d02be1f8048fda82a3760b16b90d937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146664 Malicious code in prompts-hercules-markdownlint-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07b854f4be56a57ab029d933b752ea4abf4a14098042f73d4b571fd40263a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146459 Malicious code in prettier-callback-docusaurus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8670eb51790e74da0f18c792f45784b13105db35ced17fa5567b4d0730ee2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145849 Malicious code in ophiuchus-vuepress-colors-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2402ef9a3392a9464536d39559018c58910722a66f3e96b2ea86c9586448483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143705 Malicious code in io-restart-less-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f4d0056d31b5a03779d08089412376d33984c089f20b0c1f39e54e7df1036e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142307 Malicious code in event-castor-supervisor-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6703a774604ef0118aa7cf65f49695e8ece02b09f3b0d64acd5ba68d0a611c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140264 Malicious code in cache-build-commitlint-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bdd3e069afa219b7f200c4de2044062b61cd5636880c70289141ffc156b82ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144878 Malicious code in metalsmith-iota-oberon-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f64e3dc0efe6c5576461c566208ccb68e9e5cd7aa713aad83da487929f293f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141733 Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913af6b808b2592fd435ba6659a92acd757d2e960ba9668aae34518b74dc98bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145164 Malicious code in mongoose-request-remark-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ad925a35d3714797dcfe7689f896c316ad0a759ebe0b1e33a12b68b6384700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-sirius-fornax-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e66b6d4c4a782bd1811563df45256c74e75c5d248ade83ce2ab284396724d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-got-uninstall-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c241c79c54717669b1615f6ff39fc3f1d6345216857f5d19eb4f75e5baed112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-selenium-antares-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a0dd72728d650872cc34f9ee02fc202938c2a6f0fd57fdc800cf7f6a398729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-antares-kastra-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80905b19348dfe1664b0090e7c37f23b84afb3cf803191684c8a5a86dc2daed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...