MAL-2025-145911 Malicious code in orbit-pegasus-sync-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79082f20d6e936580e8dfe2211f2b6e53ef751c257ff9d6471bfbb874308adcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148114 Malicious code in spectron-docusaurus-nodejs-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5ac08c543ac3751fb7a781814ae801d51313d038a0df1a8e71a40a06550122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148170 Malicious code in spica-nextjs-draco-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104bee7c9443b8b60097c56006cf5a5de3a744041d0782374f5a0436e9132b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145917 Malicious code in orbit-venus-stop-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edd2da11014ff8bb8f969442d44b52f7b98df08c630c9c20402410bc3722694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143559 Malicious code in indus-bootes-release-it-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f90ebc335a7deb65c4931a3acab28e00302095cd25fc35c9c9f3136c512ae0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148052 Malicious code in socketio-fetch-deneb-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257183e6dbffbc9a14a3cc9fb84f992087f217c37378c096b9e0c5a0d86f8502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142914 Malicious code in gemini-pulsar-sadr-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6beda36d4c0266c1651e7f0b36b409a3b3136c7728447a6ddd5d69b184eed849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144498 Malicious code in local-sequelize-canopus-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c1cc3740c71cd71f7bac9770bcd2002c41bb0acd5e0084541c7499f78b10e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148024 Malicious code in soap-kronos-altair-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d77eb1f92067d89ba7771e0a7455859f0f64087963510a65ec757bc34185c648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148719 Malicious code in toml-node-sass-lint-staged-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9998636ea0a280ddec64a269b14991a32a187101be27f6e27765845c99e790bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149674 Malicious code in xenos-cypress-ursa-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c7efb0dfd9e0a603887b643409249147387ea0015b6b38655d3aa6b494df52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140366 Malicious code in canopus-nova-dotenv-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394ee31a86cb9f498b7f9ad32a3105ce4c906477999c9677d623111b27a5bfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139712 Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149740 Malicious code in xml-version-rimraf-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8e258cbbd7b05fc7b948248f6d0922d4fcb8d1fd555abab444074a2c1a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139562 Malicious code in aquarius-xanadu-zephyr-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2cedad061180675ee04280017b0fa390f96a0e919fa21dcb908376553ce93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143407 Malicious code in hugo-transport-node-config-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9423feda132f6fc399753b25257e55a7b21305d3123c15d455b262af1712ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-miranda-await-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2d6d49bf547d156d487f81fe46c8cef48cc9384157384e01f1f52036de4da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-bootstrap-mensa-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009c71f1315940d59a9b82670ee814e68fd91ab6279feadee976b4cc23c5e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-farout-morgan-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17d6cca1564673afeeac69a3122e8b70e262fad2863a5d0639b1f4bc676a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-delphinus-rollup-plugin-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9c34f33a539bde2ccf44a29d598ce5087011b9183b6c6c3ea53c8ee0aae632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...