MAL-2025-145122 Malicious code in mongodb-csv-hexo-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e4d05be8e2ad6f4fced8582bc9c7f7ba53cfa26c1b58a82d20866775f2c102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145673 Malicious code in npm-alphard-mongodb-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95542288931cd3d5d462529f222d90c0fe40a687de3fd60c6d1dfbfe0ded262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141184 Malicious code in cosmiconfig-hexo-blitz-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44be45fdde61cdce0f1f9666eb2a13f985e7e09710708a60db96f21303c6011c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149613 Malicious code in xanadu-umbra-got-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bc596c49c4ad9d9d07157ff4fa1b8000bbe0213ee0fbf7f7bdfa6f7b8f7b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-loopback-enif-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b262f3dda7c4c884473fc437198ad7e57eb99f347ca9809993ad238590768e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140046 Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141098 Malicious code in cordelia-cressida-quantum-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27661cfc261a53a02a9701df91b624e832b0af05f032fa459f8ce8ed27561fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144850 Malicious code in mensa-fornax-dagda-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a30f012f70b9c04326a3eb8049c9458b8986a6a78608bd59de0d84977266c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145602 Malicious code in non-blocking-apollo-proxima-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075b4ab62f509004731e1c2bd1277e8fbd04dc6618024de17b3e217fe8e76e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147773 Malicious code in sedna-leda-virgo-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678811bc3418cea8107e8a9fe3f77efb20d7b071be856ea9696257f6c00d563a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140861 Malicious code in colors-puppeteer-got-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788ee5ebff473dad8df11e086642382331492615ac2e657a5d1576b67ab64f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140447 Malicious code in carpo-kinetic-capella-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36738fd5391a2e0a3836541071bdde4fa6d1a86665a79160d7c8262aec63014d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145041 Malicious code in miranda-less-mensa-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc4e4c231f13e5fecc93bd7ea1c4f26d7f4e00913d6f3b2104cb008a253169e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149156 Malicious code in virgo-global-superagent-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8563f28a2a27d7861250bad8476d45d2682ca1232f97b8792980d923d60542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139223 Malicious code in aether-antares-nuxtjs-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea1a1140aa617b23f10af3e5f342168ca2ffa2f4239a65643f7b7a1a47e3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148178 Malicious code in spica-rocket-css-minimizer-webpack-plugin-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da0c09aa3a47b37c6fa3e23aa49e0f10af52ec0d0925b725afbb6e89ba5d70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145145 Malicious code in mongoose-altair-carpo-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098ba0624983e816986795af3e5a8fbdfcc6ef8446ff26353af8a45c6ef0a8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141849 Malicious code in eclipse-enceladus-relay-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74cf1cf32a2c53727aed61c915bdcb50b0dd721cdae51a624f96fd5736c2367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148122 Malicious code in spectron-protractor-nconf-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4dfe990dbd0d65d1f78fb921819fad3f8ebe875a224734af2b927d4d3e8d38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140794 Malicious code in cli-electron-builder-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565605b8fcdb03d5352356ad7f15ffc45159ec0491f1a7de8d9824bb1a36ac6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...