MAL-2025-145013 Malicious code in mira-perseus-delphinus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370b99d13baa843ec3e6b05367062a9a8f526f0778000ba19ff3e22729a31288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149284 Malicious code in wasat-css-minimizer-webpack-plugin-grus-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bc4d6d32a3ad2bf2da3f04d696481a91223c21f09d5bf439ab6b67546f3d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144795 Malicious code in meissa-bunyan-loop-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2570039e57cef0e6475a2bb439694e2b71ad50221717be387abd3674716b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144599 Malicious code in lynx-rollup-centaurus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591ec6229ab2705b8162f934c9e360700e809c8b16462a0ef13912f665240b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146729 Malicious code in proxima-process-grus-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e2ea0253eb4cbcf28c3e8526b146995a264704021ae0f5ee845fc8dfb8f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140231 Malicious code in bulma-umbra-jwt-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b1e107a01795cb4e0333a5cd37929bfa63193200bef0f27be1199d84640f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146641 Malicious code in promise-graphql-start-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2289446017d83cf85ed806fb6e736a6f69f9e8d4e760a2daf3d238881af564bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149116 Malicious code in venus-mocha-start-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d1cc69d270a33ba2ba84e61c8cfdd3271303ccc4b24590d7adc20af1c71d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139902 Malicious code in barnard-chai-public-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f19577d367fc4d0fc720af976a8d7063e66a4eb3209ecf31de69fbf10a580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146909 Malicious code in quantum-mensa-callback-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c4af59ccdf081d321a6234c0e30dc04ed83eeaf768d85866f80c9b81d02f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140337 Malicious code in callisto-jwt-fomalhaut-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d4edd29a5213c358777f85632ba1fcf13f6e4e6bbdbeed1c260ff2b3425120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149642 Malicious code in xenon-bootes-local-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1ecdb72de6b1e69ec858424fdc0d8d7ae8020b292dde4fbc821fd802480490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140163 Malicious code in buffer-nodejs-native-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdfe7b627e6dbe13e573500c4bac8abb0660f48ef88bf69c58ce61ebef05e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146634 Malicious code in promise-castor-pyxis-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e998a570333fa94903c03deacaff2fab31b844d926782cde24c805305d916e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145011 Malicious code in mira-janus-mongoose-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0171b3e4f13eb46e037d4896a616a9276aa90bacfb5cd5c1f5e85e1cc27fadda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149548 Malicious code in wolf-enceladus-telesto-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84a7209ca76d3f75e1441dfa06b102101ecf201a5d0202b27c3ce4d1f243a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-sadr-ophiuchus-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feda0291d6bed0d6bc08e9cc14832ec5fb222ee2ed5ea483dd4932982f6b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-quasar-quantum-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9677d228e7eea18d47b9886132ba5dbca5bca647362142479585ef14b666d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-sqlite-got-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538eb2a77f07a4d82c2dc92a67f5740e341cb37992ad8e0cac69335ae315904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-prettier-stylelint-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f28d3b55edf0f2e8a35cc81f0cc5f431232659438bbd5565040e2cc2dfd17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...