MAL-2025-145464 Malicious code in nightwatch-elektra-impulse-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2eb8e6510ea2b0fe73a9d801e439dec04f4efc6545ba6b27f35e11ed2a826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143006 Malicious code in graphql-orbit-csrf-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947709eb4c67dddd2c3beb0b9c8b47c7a310dfddfda1f9499574825d9538b59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140505 Malicious code in celeste-cressida-sirius-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc225a509c12ef0192954308f084c3a6d29def818adcdadb80c204a0e75f04a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140748 Malicious code in child-process-graphql-unuk-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a73489e36ef579389cba8cf836adf942eed3cb3bb7dd3b3e2c1489719875a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145120 Malicious code in mongodb-achernar-module-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eae1a1d9e6036f757faac69de61b2bedb3d9d5a5e676a3fa82fb1634b3e068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146350 Malicious code in polaris-janus-dotenv-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008edfb3e2de8aef4c25fb8c4d770de8d3c69bb0d3f4945c1e0c4d20a43e97a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139263 Malicious code in airbnb-terser-deneb-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e88e788e5051d47ac4462b17dcb5b384b0f924a8510c377fa0fa5a96a5a2d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149591 Malicious code in xanadu-child-process-passport-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd74c22d0aeaa7681ed0d073575724c68f031589b73e3a31bcdcc4eea9ef361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139257 Malicious code in airbnb-karma-lynx-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05e1e5527ea26a244d15e0aa5a7e08fb9668682cb3c6840370ec54b8aafc6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146047 Malicious code in pegasus-readable-request-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8937ff6041de5d507174ef62c688dad04838d26846a186dbe6f7ddf944c3ff94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149799 Malicious code in yaml-ophiuchus-hyperion-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391e658c8a08a9667776016b9b6caa23975d58346ee82c0e81f3025358eb9a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146062 Malicious code in pegasus-ursa-aether-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3883d3f8b0e6337de853aa12f51a368247945a18528374fe17fcc9da15d9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148978 Malicious code in unuk-deneb-meteor-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e62a13a5b39e25f133df3651b97fa199b321ebd98fe93315d681ddc4482580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-xanadu-nconf-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f1a6f890cf0e2133ef4b2bfa33988c3f3bba177346a6626af0630d5b8c70f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-chakra-ui-umbriel-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da7a0c50622f6f39f61b3b41a7ec2cba924eafff2db61daeb1da12326ecea8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-stream-nebula-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38e7a1ab56efe7764e9f41c224575c50e02d176028d4cdc32466f22022aae16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-bunyan-weywot-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88bff2320d5cdd691ca28bf7c30f99d4da68b75a96ea9f9ad4d9a602cfefd49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-sagitta-comet-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a6eaa1c93981f7cd8b58c6fe5d9550b619eb1a489d534602df667690e1e672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-slides-blaze-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c88be71e7482888225f7680add9cd29413792e910587914de99a7bc32af6ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-titan-rollup-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcca8d6c574797e2e2e679ad497bd80547d1a272b15b1e582052f42f82f871c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...