MAL-2025-142956 Malicious code in google-backend-lyra-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b28cb62fe2a152557a0284558db91baf5657ae5209dfe3be3c536704defb5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148958 Malicious code in uninstall-helios-geckodriver-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be46e5e736ed22f6a90e0fd254b6547b4d2107f80b556b56dc10936c3ef7b7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149876 Malicious code in zenobia-sirius-babel-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a7bb68aad6e0cb18aaab45980b523b7643ea3438622b2a7f6774d879deed4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144608 Malicious code in lyra-grus-csv-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23074145049a720e304aacae238b9e6e91e6e85a207ebbd06a7a074a4f7fa95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142681 Malicious code in framework-eris-nuxtjs-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65351c6929cec60563f9d875e745f9066af992685e01872ce292bf993c8ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148054 Malicious code in socketio-geckodriver-child-process-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992519d57d5eaddeba7d0d897fcfd3a9290cc2d2f620518393717a638329adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149464 Malicious code in wezen-nodemon-spica-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77ff6b3eca8f27c52994004cd463f9db40fca9bf33131b79db34028edd8dd2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140483 Malicious code in castor-cypress-figures-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d75653f62b87ec0e21de68334b11a2163da7ee5b1caee696ad96d9e1d7b81d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142804 Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140729 Malicious code in charon-pegasus-jsonp-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82efbf0050b8e5d9394494a4d5e819a5bc550e287d785c51d7699688618a277f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147067 Malicious code in react-bootstrap-mongodb-phenomic-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a578d2d7e5537e4e062495c0e294002661cc51aeafcd9ea38025413e2c2c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145796 Malicious code in odin-janus-procyon-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b384e902e971c3bf77f1e3356c7b21237e48b31e6707cb7d609e0efa6b0fef53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141610 Malicious code in despina-ultra-antares-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819cb736fabedda7870c12df38f766380a63c50b19c79037d869d48113023350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142934 Malicious code in global-fomalhaut-protractor-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd11327901ff2b5080328d85f1d8ef235277cd984bf86799e95dadde492694f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147791 Malicious code in sedna-request-epimetheus-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cfc4ec996afc99ef0c7286e1d678dabc38dbb28ae29ca34a2a35855556cca19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147317 Malicious code in resolvers-backend-antares-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcdbeb5f3f8404e93c29ffd571f029c12b4afe279214521372044e00e6e2b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140097 Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-pipe-jwt-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755d00753640e4a895e2f9616e2566192bce7cf934e38df290ee1c614da63837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-mysql-graphql-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce30421baf221f5039852b56fa71beb90736340eb15021cdb3e1155efa5bad6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-repository-yaml-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95beddb139e3952dd262d123f7bac8e6fb2dcd0a25b82d6eea52b3c55bacdb52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...