MAL-2025-139685 Malicious code in auriga-norma-test-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da79d86b866f3cc16959cbb6ce5270de1ace8196be287862f9fc39b06e0900dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139924 Malicious code in bellatrix-astro-sedna-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e877580ed0a2f032f1ffa5c39273db2878f9aa5883de2cd9220fa632d0f1307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143526 Malicious code in ignite-spawn-fornax-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f78a8a37f81b9903ddacb56b345c59d7fd8bf72b4dc73ca290d3a66f9b2d814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142553 Malicious code in fomalhaut-spinner-capella-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0e8d1ddde0788381e96ddabfe8341e2ff22da6843eb0046ffd53de5dbc0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144734 Malicious code in materialize-await-equinox-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b788c7f73eabc1f4be55768daabef3d611044ebbe93e7a4baf4947708b24a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139613 Malicious code in astro-phenomic-yakutsk-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461199e72607e728901321d9c389e62b9c84c9d09c748e5bc6c8b32c0f881eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148500 Malicious code in telesto-readable-forever-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a42f9d68db37c59cb3b7fec781665652d4c469c2a608557b035bc57058412f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149648 Malicious code in xenon-library-cors-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa1eb5e8c227964d009dee2eefb0f42f87b23ce32debaff53c017f95232a8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147733 Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-prettier-antd-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43466b1e90ff3b3aed8cbdc1dde1a86542af225d18ee73ea34de99f4f4ec5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-stream-fetch-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479f119c5107d1516e05ddb76327a4fd1f0c2d0d7b498d4f65b97ed857f87e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143607 Malicious code in ini-sirius-ursa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66192a4c2d85e47773b11e7fb2e2aa20818e70a0701268640be7ec5ad95c09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139583 Malicious code in ariel-corvus-event-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6634e6e973158deed32f962021eb150569df92258f47d2f426368fdc00e9b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145140 Malicious code in mongodb-server-yakutsk-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dcaba764b7d0683fc08db311198f703cf88073de862611d3f71439e3a4ded1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145653 Malicious code in nova-centaurus-telesto-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bbc66b20d8d504c89d9ccde8e832f98bb379a688b9c04e2ed6dc9641f1d34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145895 Malicious code in ora-request-io-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9b22c5b28831c6ab3fe45a56178c6333278db25389c2d08125f9f6836adeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143343 Malicious code in hexo-iota-release-it-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f83a9d526b35e0af23d3d425be9a0ef87caa366f722a9b99e5f69b23f8b7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145090 Malicious code in mocha-private-cassini-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc82190d8b17d1f57a30e12ed75fde26ae8e9fb09897bcb4bc0cb303e68b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148892 Malicious code in ultra-eslint-plugin-levels-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4c0e6023a4a0a627300221eeb5bbb3e70c0f49572a3e51aaf6d797bd0352d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146002 Malicious code in pavo-miranda-oberon-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e045e078de01e3ce8c9a68defd2bebe8212d9bf603e6dc9faa91cdda033f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...