MAL-2025-147967 Malicious code in sirius-pm2-sedna-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146707 Malicious code in proxima-backend-solis-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47debd0e472e359f6d7a9c6d07a2396dd62b9eed5f75d70e652ee1aa399ed61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146688 Malicious code in protractor-loglevel-telesto-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a82717f772c19f1967d06fefcd6ef777d6e576dc649381c42dc4cea9fe2dd8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149234 Malicious code in vulcan-fork-colors-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902b014ef02bf4a89bd5777fe120aaf8ffb901c0b2721470f49bba8874914733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147853 Malicious code in semantic-ui-morgan-node-config-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe43159bc0974aac91edb5f44d4b66b85095c6302b7f08f0471d81541e415a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147055 Malicious code in react-bootstrap-draco-nuxtjs-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503cfd33203eb61bea2f55c0cc50a030ca1af9d5506549c886acb9edbd9776af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-wezen-procyon-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82056215e83fbf50098a0c0cd3af13d16c18accb98e2b5be855c8327e02798a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-promise-meteor-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580f87ac6bffdeb6898e6f59a7f7bf2ff028ddbfdd457d4b79a76adc59a2e3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-rimraf-altair-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51af5f7f2e436b1bf77f1f33fdd45e82656ce5d5f0bc51c4f7e5e94ac407ee73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-octans-install-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f459054cf2b975246d8f9f1230a9f2f32ab9a8cee1ebb4b00938c60accaa03fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-stream-global-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f092b3a5f594f4680772e986c332edf9177a9c2c59021a558a60473af3db464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-gacrux-markdown-pdf-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9933dd64aafb849bcbec2a57eae020b648469545019fe681b4a0164c291181e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-colors-less-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5219a46e3ee99193ab56960e9d2feb421f49c26b8e95b459a6ce6852f923647f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147861 Malicious code in semantic-ui-yildun-dagda-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a832469d6eba91b6ab618960a4bc5428f7cb35191c651a4f3f8f1ea7fde050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141138 Malicious code in cors-slidev-json-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffab7ee1097a7df9774ba57469dd259df17b9e9111d9a59f5f924b99d6102dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144949 Malicious code in middleware-blitz-mutation-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f55a3d1837c6187591f05ff77aecde65c5efc3ddac721b99369b3e052d02a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140836 Malicious code in cluster-sync-development-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ded04885cce013370c43c85d9b42e94e798f39aab69a13d49118a8fb5df4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148225 Malicious code in sqlite-europa-remark-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499420da960ee4fe7fe2479f0c22372a570f7973d6202e7667104cd5e5be1889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143985 Malicious code in json-umbriel-orbit-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3b29923bdd6d0016afad2d219a67c133528e65c02956f723acc4acf4a7e49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-webdriver-manager-chalk-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a4091768432e806b132a6147bd0d7b9388cffec761aaf5c90f18b1fb1576a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...