MAL-2025-144829 Malicious code in meissa-process-query-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ae5fdd1780de97e98dc346d7a17d21adba49ea87d63f32d85c3c2e030b0131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144559 Malicious code in loopback-neptune-draco-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bf80300eab0764f6d6d3b01b0dce677accede3ce2225fb1ebda3b3224b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143854 Malicious code in jasmine-grus-nightwatch-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4daf9d787d3a053b657f214222fea06c162724ee8a4fde668874c1b9b122b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145222 Malicious code in mutation-foundation-mocha-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4504dd92274555fec52a11e4209f610f222ddd78d1a95312070a220335e6d8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148232 Malicious code in sqlite-non-blocking-native-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bb8d693502367467a865250306d6251623b4fa2b1c23100452f92000dc12d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147711 Malicious code in scorpius-nodejs-sagitta-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf76e73815067e636ed09c97843c1317d6aca06f6662ad43bc75bc2ef6f46aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145841 Malicious code in ophiuchus-sedna-ariel-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61001b423af9afb8ea8b076b4c05b7e15374124cf3dbb5d8a90c58906b6b60a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141547 Malicious code in deneb-magellan-triton-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 757bc1688c339f1ec8ba8edc984059299631fa611e743caa9abda899688a70c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140583 Malicious code in chai-ariel-leda-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0c19fadb59ff1cfce3dcfefcb8cd39cdd8131cefd27b03e987380a8faaa1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140377 Malicious code in canopus-xanadu-markdownlint-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0db4becaf61d04f82a2b7159858b15dc737727a86bd0c3f376ed3aaaa44ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144617 Malicious code in lyra-unuk-rocket-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4295093b68906c766ccc987733aa97fdd69c60c503b7a32a52f6623c22ddb722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144073 Malicious code in jwt-foundation-kronos-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02bbc3d31e8bcc41e33fd6c91d9aaece87fd4ad899100435d7e8ac475172ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144777 Malicious code in mdx-sadr-chai-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb09f5e2a7704baa6438a141cf28d13bca7213b991283293d34302c18bb1c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143012 Malicious code in graphql-virgo-prettier-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf0c2ff36e58cc35243ac8e68be82032aa3e1c00c0ac502474a893c01758736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140571 Malicious code in ceres-lynx-upgrade-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82af15cc688492a87f753018c2a22b0de6ab6047cda2e5cd8a4d9ea67d74dfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140747 Malicious code in child-process-framework-metalsmith-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849be0aae93e5cfbd3e6a735ee71094677ea146394d513afeaba71ce013d555d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147973 Malicious code in sirius-resolvers-pm2-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b5cbb1e0e4935676cf3ee3d871ea76f06f61c680035426f909d71303cc289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148686 Malicious code in titan-nashira-achernar-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4483f30bf3af73574f51a767375f451474ab54c0ac90c82e2e69c9fcd2d14b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145094 Malicious code in mocha-transport-indus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d4f63add009e7c55ca249a44aef7ef151f3a1806949fde2c2fc4f7f2e01da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146172 Malicious code in phoebe-prompts-hercules-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a51660212c8f8e17ba061c5d3c1287bece955ade4374abc8c6d27c3156ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...