MAL-2025-144606 Malicious code in lyra-elara-mongodb-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c379c674d57bf6ddd4cc912a0a3a0399b8b2db79a58e7383a36469c02ffe92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142823 Malicious code in ganymede-sqlite-proxima-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a316a48264e7551e91cad378c7efbf597ad83c23babf83db479f50338e26a6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146835 Malicious code in pulsar-jwt-warp-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd00432a3cb61697434444346db1e5751897caf37a0cf6a2424a28362411bc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147241 Malicious code in remark-astro-forever-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c858389f05b16e2689bf68d37a15e90ea748e2604af180f27de3c2e5205aad5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146231 Malicious code in pino-pretty-comet-apollo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0fc55dc02578c07a1ca82888f7559c7f7490d510463dac842eddb8680878a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141631 Malicious code in development-sedna-webdriver-mocha-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edcd3a5638cb84734581316b37ddfc7bb43dfa6c1eb41b1e5f4a1d0cf3402f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146590 Malicious code in procyon-element-ui-uninstall-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c9482de78b8db351be096255e8d470475ac1af6f9f421925c5db2d0e149ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139800 Malicious code in await-less-xo-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a504bf7c4d1d9c1665d27175e7e303cf7a0698c8d6828ee8a8a07fb9acd4304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142963 Malicious code in google-izar-venus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bf8d605d34cd93a89aad3af158c04ebc00872639c4117254350723c6002389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143466 Malicious code in hyperion-bellatrix-carina-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d1bdf4a11c0a392a600e12d08a06142d23cf402e33d975e8db903eb91dfa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144820 Malicious code in meissa-orbit-bootes-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2f3aee0366b8961da6c68fcdf85a8a959fc9725a26442353bb2f5b173161e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139404 Malicious code in antares-dagda-middleware-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ffcf858ce15c8cf2b6903a2a67f79e923a275ad287c517e0f23f1657995130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141166 Malicious code in corvus-readable-cluster-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c703b164d6f08800f2448b0ab59f117eaa082c46ca937563ffc6be031c94526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-less-loader-uninstall-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0acd2d52c31594304a5cb4d7f1f978a7ccb708ecc08f763b3b072edd8a37b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-zenobia-dactyl-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0470d51ee094abe9965e79155fdf1af474e486e72ea8819e6dcf15e3b0673b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-promise-mongoose-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53bb462501821db097afe4d817964df59b4d319045bf01e3471e2e443cae8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-release-it-markdown-pdf-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-zephyr-cygnus-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126408fe26e034015b137d865bf1fb63593a019521549e408cbab133a62fd25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-middleware-bellatrix-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558a753c5ec00d54999a3046a59f0048b6658f9f6baeda1a054887a37d664257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...