MAL-2025-149060 Malicious code in ursa-jupiter-antares-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9475e6896f644cad679372be114f300b3ac25f0ab22b63a70f074f55dd053c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149515 Malicious code in winston-nightwatch-sagitta-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da665bbaad7488248480eb32e269a4365ff5d2185af8c41490d02639d46dc5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143911 Malicious code in jekyll-norma-markdown-pdf-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadcdcc348ee3e2427e061db339471ee520e3dc223c25f9e41dd0092d58d434b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143008 Malicious code in graphql-registry-sedna-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43426488caa65ceaf277ae33df4839e7ebc26fd723dca2280a380133248433ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145361 Malicious code in neptune-exec-radiant-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce87bf0b08a74698999d56c5a3296ebdabc37d9c80495022b80d53ee5f989239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146699 Malicious code in protractor-sass-loader-test-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ccab95f5e2ce85e46de051c78ad013ca2e19a9d5a01a4ee0a843f29e4cc47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149779 Malicious code in yakutsk-resolvers-phoebe-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f5fdc72d93b4fd8896a336557775e4a55ac8cfcce0a6c6bb257314f79673ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147320 Malicious code in resolvers-cygnus-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cef4304d5ae62ad5925a3d7772113cfab7f2f31222305bbb2d2f22097c3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147243 Malicious code in remark-castor-ophiuchus-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9974665bae787c95a53b225627dbad7b63f5036dde9ea0330b70f1b73b5aa9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146593 Malicious code in procyon-ganymede-foundation-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd8ff9b18481f1f0e39f42b03b654b1dca4dc879cf92f172796dd1a2a2aa249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-blaze-betelgeuse-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fee5f7c3e2acfbe7402c84173336a1d9eb3ff7a298a28a3038a72366844dd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-axios-mongodb-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e173859d9255f417371855a249aef1961a30d39eda19f4b23ecc555ee150b732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-wezen-nconf-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971b1434499a9fbd6456451777a548f2b380dbfca4750fb5aa08b2389ffaf522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139435 Malicious code in antares-restart-oauth-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f215c560af1a4a5acd9aa3e2a2551f566aa20dd37dc969e594fe888df260b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143725 Malicious code in iota-fomalhaut-less-loader-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0ec46f8e20a1a9d4098250978e555733b981be3fecc9e2382809291a2de13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146643 Malicious code in promise-markdown-zephyr-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387a151346281441ebe5a92d11f527bece4335ed634483aa3ab8fbaa90bcca42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140202 Malicious code in bulma-antares-update-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da90409dae49766f73cccce1aa6e68c01b0cdeb89095c307fa9ed01a6e3d9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142473 Malicious code in figures-middleware-centaurus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed8a57bf5c1a467cb3057d957940dc0b42c95b9b657a545064bed0abd5d9a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140774 Malicious code in chromedriver-husky-flare-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427eea3861085f119e61e49f48fcc8a63b170484eae6227054dbe4fe1b2baded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149350 Malicious code in webdriver-mocha-jabbah-csv-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42546448faae6a4d65c744b2b68f7c5abb36c64e33b66466ea0e22c898a9363f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...