MAL-2025-142141 Malicious code in eridanus-atlas-jasmine-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc87488aa9c8d7ca58ed718addb38c591006dc1b7cbc23c931a5cde9d6d8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139967 Malicious code in betelgeuse-aquarius-sirius-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f07e412e513ac365bad2e9f801d69d619cf61540fe79e8be6ab198c3492d5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144240 Malicious code in lacerta-geckodriver-tool-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8ae917a5908e869976d6341f9b536915f6556c4e5f81dbad2c4dcd8bb32526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146838 Malicious code in pulsar-orbit-capella-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bdca590ad06adc6837f3786b26dd80e42dac494df369de6e0a72cf115db638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147243 Malicious code in remark-castor-ophiuchus-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9974665bae787c95a53b225627dbad7b63f5036dde9ea0330b70f1b73b5aa9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140909 Malicious code in command-janus-xenos-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4326baae54946d0c93ca65ecacf8add96cb2a440dbb025b5308740cec8e138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141915 Malicious code in electron-fork-mira-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cfca6cb2c335fe1f49ef9979402387599d2e54f4a5c4a3ffdaf8a61f577746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149865 Malicious code in zenobia-cluster-package-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403eacbc4e8c829cda478a410fd600fef4b12a8d2286f53a393b36e45c6f891a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142318 Malicious code in event-nightwatch-stop-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a8f3d8e3297fc8cc6ab9afcbfb139ccb0c4598a5bb32b378d352d81064bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145231 Malicious code in mutation-rest-mongoose-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0a079ebfbf35826223a4ed7a0397e374dfc04468205ee22c2a20a8b5d25fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141772 Malicious code in dotenv-safe-protractor-bellatrix-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8193c16d4b5afbfe238ebe608716ba96c5fff7255b801cd103a6d0ee39f61375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139709 Malicious code in aurora-readable-callisto-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eddfb3159d163d87730d4aac6ea741f38f591cecc27a0197f72edc1a0747bba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144060 Malicious code in jupiter-lynx-pipe-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0162a2d2a68d0f59d54a1dd129db98281cea0bbd3ce97be9d571834ede434b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143725 Malicious code in iota-fomalhaut-less-loader-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0ec46f8e20a1a9d4098250978e555733b981be3fecc9e2382809291a2de13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149521 Malicious code in winston-procyon-cosmos-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5551dbc40563853d6ae0acd4a986d5c867b6b5cbaa8947773d0cb09ede006019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140695 Malicious code in chariklo-dorado-ganymede-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84db3f327225b1c944bb3fadcbb5ecafcfe89a049123bfc6afb6d2351171f212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142288 Malicious code in europa-protractor-readable-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa112931e43f24bbfdf4a2b84e975c5dc4fb7573e88503849b1ec74e6da0a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145361 Malicious code in neptune-exec-radiant-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce87bf0b08a74698999d56c5a3296ebdabc37d9c80495022b80d53ee5f989239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139435 Malicious code in antares-restart-oauth-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f215c560af1a4a5acd9aa3e2a2551f566aa20dd37dc969e594fe888df260b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148697 Malicious code in titan-venus-iota-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a805c600afde8818b0e2e52cf4d91aae02df504a12beb8cc8d54071c3139ba43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...