MAL-2025-142342 Malicious code in exec-gravity-async-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0ba8537711e36b7af5ff37c1ab3ce3dab407117c7673478eaa700d75c5296b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144106 Malicious code in karma-fornax-sequelize-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665eee411bdf1ee3767b099ec85214a9d2342dd070d8f6b793e26e4c92f55e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147167 Malicious code in rehype-dotenv-safe-electron-builder-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f221fafb950cbab2437dd43b98e8014478bba6dc13315af5146413ce1635d6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141696 Malicious code in dorado-protractor-ariel-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13fd03154d71a25bfffd817c62d2ed9b024434ce213d48112596407a8e63926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148010 Malicious code in slidev-nestjs-jekyll-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa9b75a2d8edb5a8c369a000f920617aadcc6109b2c759632c6965551d4a997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140389 Malicious code in capella-hexo-subscription-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2105b8bd28c6efe0d62e14f7c0a60d2d3e0e8df12dba421dfdcfa60299bea723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146880 Malicious code in pyxis-karma-sadr-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65565387abe4beae136845f7afff20c393733be49cf9495c468578986e4cace2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144139 Malicious code in kaus-cluster-superagent-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e520fa894f85dcf5047f8f11da6df83734d4f0e4807024182938c2148739a349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146568 Malicious code in process-selenium-chariklo-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf67a853928b37c4290d3a2685b95111adabafc9c129d86655e538fce1ef91a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142860 Malicious code in geckodriver-chai-hyperion-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79d495abb6c1e5b082bab2c49a939c1066d9169d018a55eca80c287333b651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144806 Malicious code in meissa-fornax-ini-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635fe853f926b64f3ffe8ed1be352a1c5361633308b5d473efc4932804483edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144246 Malicious code in lacerta-magellan-sagitta-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daa5ca770f65cf9f926a2a05bf541b135aeca414fafdefcc3362e1a5941c1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144938 Malicious code in meteor-standard-xerxes-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f7a05cf55a3f259e19fd2c4fafa2fc5bf3d5d7d3bfc1d8abf65fc3790d2bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144916 Malicious code in meteor-iota-xanadu-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575355204cf2d8533897eda0e081bd9259ae4c69d20cf2c31ede843fd5cf5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142646 Malicious code in fornax-promise-less-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc474568ab6ea1c4a33328711e82d6c2c1af6eefa3436ba7ab3702f46c427ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147189 Malicious code in rehype-testcafe-iota-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d5a0ef86d9d1e26796efa729b64cfdfbf09a3a2a2669f32d1e01e0b38ee963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-halley-vega-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca1d66ecbafe685efc60a6bc86dc19f0340f58aca3c399a481f5b650b9817e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140086 Malicious code in bootes-npm-nightwatch-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ac99d493dc23e9056d3b5d36fa33e25f6df4dfcb9698aaa30abbbb5a315d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147199 Malicious code in relay-cors-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9749ec9054bca0d033b67273f121b943ff34485eec11b3bab1c3b3fd501e8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141924 Malicious code in electron-orbit-eris-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31d6232b592be2cc1a0994076a160047d12756e8ff87bd53613432dc6ecf7e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...