MAL-2025-142279 Malicious code in europa-lyra-aquarius-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6306362f7fdd29dade449c58d4fb87743c3fc83a79cfb181cc9c54bf93e4b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139783 Malicious code in avior-rollup-stop-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edddc936cb28966c53e967414bf4652f3bff127a82fc2a0f7328beca98b0b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144336 Malicious code in less-loader-update-spica-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458ef2dc19a186f786aa9fbde9fb2071ebebce6bc29caa9bd74cf4543b1799d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142963 Malicious code in google-izar-venus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bf8d605d34cd93a89aad3af158c04ebc00872639c4117254350723c6002389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148596 Malicious code in testcafe-hyperion-envconfig-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75325a6cd17ff0185c982e5269ab753bfab2e7cc19234fbc8456515a4ecc2381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142765 Malicious code in gacrux-galaxy-loopback-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe9574eada5f7856d57a924bdfe32e8ebcfe2ef5419865a35394d25b67e09fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145328 Malicious code in nconf-query-browserify-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602bc965a67989211f80bd7ee2b62886edbfc35af6a27e879381d16defcb3ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140538 Malicious code in centauri-semantic-release-rehype-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00631bdeacc80c093d234eface25b68505d7f6b0acf0e1698b7629e22c3c3e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142404 Malicious code in farout-cz-conventional-changelog-loop-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32def6e54f295429be6ec6c01f65d319ae3db26c400298a888645b4981e893b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143151 Malicious code in halley-jupiter-norma-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fcdcc66191a0b741cc743c102587a04433fdd67757aad07d5321a0f3eac3af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148090 Malicious code in solis-sqlite-phoebe-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68930a3bb62183db59be60a97ce209a4b1f7ec8908589e1ca718a0080708f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139756 Malicious code in auth0-sagitta-koa-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d93c83ef09b706f1e0c5bb0ea44c3961eb7c8d59ba7634621209328d95356a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142118 Malicious code in equinox-child-process-deneb-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fbe7ad61e9974fe7ed3d9c4b62c0e379c9a6f7dda87e121fc18ddfeb5770acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146044 Malicious code in pegasus-nuxtjs-nightwatch-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc38e25ae939a2a042c8cf5c3865a6e8479f2d74f275f30ffd53c4bdbedcb729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145163 Malicious code in mongoose-prompts-spectron-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664e602c1c1f17845de88222beb490ff65a987dcab2ecaa0d720d4c748d9beae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141917 Malicious code in electron-fornax-testcafe-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e6fd8c4dcf774ad276826eeba711a2d2ff461fa4ae94f3b74e2d259b6c1d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141319 Malicious code in css-loader-terser-rimraf-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3369b39705936e81e044143deeb3d264e0c799da1d7145d7a34a47964089ea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139968 Malicious code in betelgeuse-betelgeuse-carpo-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9255a7aef8d17bfbb639e1ed68efc3bb23a1a2f2b680f8f22ad8b517075a3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139891 Malicious code in backend-mongodb-pino-pretty-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc8662b06d3030aa1111dd3dbd347faf0e060a57c94ce402950d68934e7b00a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139163 Malicious code in acamar-antares-prompts-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710985a5307e4e3811843366eabbd123407628a8cca4102320e11638b7b57a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...