MAL-2025-142995 Malicious code in graphql-apollo-europa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f721d637bdbdecde413ec4901bb6ebde3edb518397261179621a070d8e961bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143066 Malicious code in grunt-leda-fomalhaut-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6439d544e62b4e9dda7e0c94d5d788ce0dd93b887af48316cc8e73c4f3c50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141818 Malicious code in duplex-procyon-polaris-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f150630be124e004b880b0b1ddb3db1a1a90e4dc246b805c544c181e3e6f32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145096 Malicious code in mocha-zenobia-prettier-stylelint-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d133a6b4bd45306ff647fdcc00f753ec4fe8e79a19333449c9a28ba453f1ba85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141918 Malicious code in electron-frontend-polaris-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98de682754ce3065d56369af1fab524ac4f432d751667af0eede0e70a94a05cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139780 Malicious code in avior-quantum-quito-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075ce8326864624245be5fb57fbf1901c47da14a12275f3443eda7cfc7e146ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144525 Malicious code in loglevel-zenobia-uninstall-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572a6e5d829e59f0b8995f1f55f6789dedcf5b988c5fff328988010ab30a6e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144619 Malicious code in lyra-winston-nightwatch-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe6bca6a2e77e7c2a22c4bbeda5029b832f6a63e482c2177518ac885e4ecc49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146598 Malicious code in procyon-izar-uninstall-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c6818e6c6dfe07a4bcc8f47737bb84825b4cf9b6ae3355816cdb6d9d6dabee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148821 Malicious code in triton-pegasus-less-loader-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de31480a225cfdb025681ed57730f33c5be84210ba940a9c5001e84b76619cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145667 Malicious code in nova-sirius-warp-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649a56723a38e2cef5365a388126358f1afb950907d8f5b300fd20403cdb11ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139717 Malicious code in auth-convict-passport-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0409e25c28055436d0a52f57af930f00c8e38df494d976a912629981f45ddcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144617 Malicious code in lyra-unuk-rocket-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4295093b68906c766ccc987733aa97fdd69c60c503b7a32a52f6623c22ddb722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144956 Malicious code in middleware-fornax-cache-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30451cfcb018e07948d2bb2cd56d9b18dbeb975f403070768ae3c9d68285cf6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143101 Malicious code in grus-pulsar-sqlite-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e248f5b89242e943362341bbfaf38bf9eda746454a0e845ee2aacaceed9773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142149 Malicious code in eridanus-jovian-ophiuchus-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6feb30322cdf7740a511ae31ec4c0725ef5694106c244812e9aaac47805ca133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145950 Malicious code in parcel-aurora-pegasus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850d9ceb923ea3b8c1fae4e07e33f2a81a4e2efb322eab5c70dcae054468a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147438 Malicious code in rigel-polaris-semantic-ui-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f909b3a7f01141b9fbacc667aaf91d800373fbdfde86330fea106757063bae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146795 Malicious code in publish-miranda-hugo-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d719f466203ac256381e61c67b5979ea11cc2ca7278330ca055096e9ffcd71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...