MAL-2025-141576 Malicious code in dependencies-neptune-update-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397b34418700a7519cb7464e8e06f7903ea7fc035617ff240992e51e6953896e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140113 Malicious code in bootstrap-link-pino-pretty-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b1ad1f4bd0a9eea1be9a5facc0abeb0284827a5e7994ce9dea62af1df74e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142692 Malicious code in framework-quasar-spawn-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf3c1ced05681da6b00f91ff5765d1da4c60751cf4ae4ef9f608e00d15fc266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149180 Malicious code in vortex-apollo-meteor-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73b39a4ae11e65de11974c8e1b34310c6ed643b2c0ffe16c0cb86f1da8bc1b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149678 Malicious code in xenos-gridsome-quito-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb64db054ad50159c2aa8b92655c222fcae4a6789e512b97c9f29c9f9bffdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141841 Malicious code in dynamo-ursa-soap-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c42154cb3d3d4f013e199a8286637184259cc713fcc3019d47b1fba096b9e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142821 Malicious code in ganymede-sagitta-mui-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb085ce71feb6c66240d4895529a244af49df4f259aa4e0385417f3e708524a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148899 Malicious code in ultra-init-spectron-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad226bbd37d46411f9e7995bd9f5fe514fe041d07fd02d014234018cf2df8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140364 Malicious code in canopus-lint-altair-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd67e9b012ad5296821bec49dbaacc8d0ba854d8356cd572e855d31cd9bcd94f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141455 Malicious code in dactyl-superagent-csv-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac37a2b7d4cf959487b6971f5a52dfd4de82f944d66391f5002aadcedb11b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140950 Malicious code in commitizen-webdriverio-chalk-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b85bc862396ad81ba207ade4159f76431048b39aae4fd53de1e288f8080bb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141599 Malicious code in despina-json-standard-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8bd6b352029ad45252a1342f1a9e98156faac7a089148feeee497d82180982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147552 Malicious code in run-script-testcafe-astro-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7916e8a378d8990513632bf657bae538eb3be1e67bd7c5848e1e1e906953cb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146361 Malicious code in polaris-playwright-proxima-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7ce5a8acc186e4762e4831633d633f82fe9434b7428f24bfe3ed5bbaea92da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141543 Malicious code in deneb-flare-meissa-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e1be5e5c6b272a1cfbef32ed49dd078bfc10a5a9e23a99c657720858a1a921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148168 Malicious code in spica-magellan-sagitta-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26930029839777d95bec5ffdd3c057e0bff866f8d01dc8076a79dd9b5ea7d020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-antares-selenium-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79c6aa8e6019e1ce2f7b72a55bb1639c2e4c68449fa2efa5c3e3be6054c8114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-cygnus-restart-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b023999bb7860791d70cbb22c24dc0e3793a114e9a7edcfd7d4cea97c2f2d667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-zephyr-hexo-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be768190f110a24ef10f4d430dd996bbf228f325cdfb3beb4c577728898a77e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-pino-eridanus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8168435c54621630cc4dc2b62e83d9bc97325824d39293359dd328c3af275f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...