MAL-2025-141501 Malicious code in deimos-mdx-publish-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191cae5a5020a0919ae5a62e6668e0bc50d53f30c98d7c2746f1d3d86bee39fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148459 Malicious code in taurus-apollo-postgres-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c504442fde8f0ce95ca21f1150316e44ec42643db293dbf940a6307e028fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-hyperion-selenium-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a73c967d261d802ac6e60fdb8f74ffeab4bddc6099683bc614752998614c345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-restart-javascript-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abfac630030252c02b3568ca487b248fd80c9ac82e7a38273e620b3acc91c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-terser-publish-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3720a288da20adf950ef63d4d9940f4c6c2306532eaf5161886362bcc34b0f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-child-process-xerxes-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e764918f26ac7cc377b1b33c32bd3f56120a8f487b5adf3b2d817e3582cd07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-grus-terser-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5e2407d2886b9fa89ef1a60c04e21b16194b41a1d72bd49c5379ff019f32b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-semantic-ui-iota-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522661629c144c726922f88e7442ab71fcbffc91daa5a123695bf5248c25ebed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141289 Malicious code in csrf-meissa-nodemon-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e942da9a59669fe15a93064e91bc37ff7096685eb34fa16ddce7f223f4e9df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149342 Malicious code in webdriver-mocha-blitz-radiant-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4348baf1f1458216d94dd1f309511cfbf0fdf3a496164b285479c6cfe65ca185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143101 Malicious code in grus-pulsar-sqlite-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e248f5b89242e943362341bbfaf38bf9eda746454a0e845ee2aacaceed9773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148246 Malicious code in sqlite-yakutsk-lynx-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b8b5a0c253c8e58cb6b450ec34b1b4da65da1afaadca90b314f6ee4c26df54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142604 Malicious code in fornax-adonis-odin-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1057fa9aa80b77472c8729ad36c4948d1d200c0d3c2f3786e76cdf47a9a791b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139996 Malicious code in betelgeuse-ophiuchus-html-webpack-plugin-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8a7d41267a9cdde6b8ba5d659fbe45a5fccddd9ef331442f4283e3558b4406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144946 Malicious code in middleware-antares-graphql-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e67ae35d50289396092b8b9b4f7526ebbf1bc4af417a1c237436cfc78ef362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145610 Malicious code in non-blocking-hapi-less-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075caf1674ff7e833f0bceb57dab4fd4abd685e881659c5f95b4ac57f926a0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145166 Malicious code in mongoose-ursa-csrf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff09a0e2775c3f104292df18673f57ff3a4052c29debe9466012a0994d4cbbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146449 Malicious code in postgres-spinner-titan-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7660d9bcacc163d4a42e3a4b61caa5d9ebddbbeb182938dffe65d55df730a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143815 Malicious code in janus-lynx-nebula-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c58283b03b07b8dc5e0e6a679d5e9ea4d0b397a111371b7e52f2647e692d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140965 Malicious code in commitlint-config-angular-jest-update-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67ae4ba726fd3e6e3db7749730a7d56351d54d32d08a77f9a7d6ee31dae1d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...