MAL-2025-146643 Malicious code in promise-markdown-zephyr-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387a151346281441ebe5a92d11f527bece4335ed634483aa3ab8fbaa90bcca42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149884 Malicious code in zephyr-epimetheus-leda-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93bd7f26a0d6052f2458fbd2a4d3a22ce879f801883dec1ed4265a6116b6f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149163 Malicious code in virgo-nuxtjs-achernar-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b194872f9972ae698caaa2de3e7002b21ee196dca833bc5546eb8a1e729b361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-browserify-cors-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a09a319db002601bb9c9a0fecedb7312cc0a0ffd958289a8912ab9e22e6b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-cygnus-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cef4304d5ae62ad5925a3d7772113cfab7f2f31222305bbb2d2f22097c3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-jasmine-acamar-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef059f771b0137148ce6621fbc81832fcd4cb1cb3f175fbf35c07aafb835450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-webdriver-manager-celeste-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa7ea599966a12e7050333baf3e7fda0daee36bcfae5ad1fdf31c994c1185f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144956 Malicious code in middleware-fornax-cache-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30451cfcb018e07948d2bb2cd56d9b18dbeb975f403070768ae3c9d68285cf6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147728 Malicious code in scripts-concurrently-grunt-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90713be5a6b07f12ea3a0a3307259d9d4cca964d591bf7ce254508064f384e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149537 Malicious code in winston-zephyr-nuxtjs-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912f6a1d7d2e2169fb6ca024f4ffec9fecad6da1c2231d994c692d1a85486a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144174 Malicious code in kinetic-impulse-polaris-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141099 Malicious code in cordelia-enceladus-cache-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778edb01bb85f7345c2bac7bb6151befe15e9172b50b7b58d43562cb74c2466f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149596 Malicious code in xanadu-fomalhaut-umbriel-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0060fea0540af3890337ee8a42aefa2ed30ad48822bfe313698e497dc0b636d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145117 Malicious code in module-standard-ora-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88755bf75283ce7dd367f4f6818bef472087445a91b70eff84ecce41e2356c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142473 Malicious code in figures-middleware-centaurus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed8a57bf5c1a467cb3057d957940dc0b42c95b9b657a545064bed0abd5d9a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147618 Malicious code in sagitta-sirius-express-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087754848ecd4b5049a7ae0f8fba20fb2b743ebb27991b80416ff6cea727a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139455 Malicious code in antd-gatsby-node-sass-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed01c36eb6a4c2e8b3ef9636874282dd6992510cced87cdd70e89a6867b45717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143496 Malicious code in hyperion-repository-canopus-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba3724528cf2ea5e3517db9608900ece2349c4500e1e11e2a5007886e3bac018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145144 Malicious code in mongodb-yildun-event-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415b4bae99cc9b1568c32a6c2a8aa3eff44332f1ed641713a550cfb1969e937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140641 Malicious code in chalk-gulp-helmet-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e819892ef4c38110723e1c2772e4b9b3e9b6d1168ce269f008df5ec18f81a7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...