MAL-2025-143157 Malicious code in halley-node-config-zenith-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e137c5ccc468d7a836bbec4596799076bc9c0dab8634e59dbbb1e9e55090e1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143541 Malicious code in impulse-dotenv-safe-prompts-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00977fe89791751a5929d9c14386109d623c440e9303ce064db9d658963cf4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146637 Malicious code in promise-draco-radiant-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef4283767c604951c602fff1cabbf32b15abda81f6a7f587bc4a8dabab43c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144744 Malicious code in materialize-hyperion-restart-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6aaae7ba05ecd5180e3aa5e75ef327ebe32706e4508f8ab08347dda81943447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143098 Malicious code in grus-polaris-cressida-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ba26fa4dbb1e602577b4133c013d196b716317ba0da07038cef37f6f9ff5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142120 Malicious code in equinox-electron-mutation-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452f0da71958284458308f2766fb474ed2aa1c1d6740f3b92cbec0f8751cade0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147118 Malicious code in redis-webdriverio-radiant-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897a7e6b0d29673d0a35368dd757e92f753b005c3adffa0fa191ef74cbe7ff03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149150 Malicious code in virgo-blitz-dagda-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ceb461493519fd852399f556b21d8c0ec514f74c1d9cfd064ccc69febfe0faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146600 Malicious code in procyon-kastra-adonis-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a0da189071d0848cf5f16588875e2674d7f21e1186a66a3cd2bdfb05a1322c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148961 Malicious code in uninstall-local-meissa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555721a317e20b9a35f22afd4a810a69c596a01db3cc09160097074ed711fdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142897 Malicious code in gemini-enceladus-thuban-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8661679b1077c5c21fbcd3671502a87927310f0826b2a9a9638a8362b6fc53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145085 Malicious code in mocha-less-loader-axios-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bba08a828bd8ae434fdbe2f07303a911d202385632eb1fa95adf5361f03147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144517 Malicious code in loglevel-postcss-pm2-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148611 Malicious code in tethys-betelgeuse-lynx-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109285f2f1e983b64fac27c958699ebc79fc2ad92a4eb353e7f25c5110e0df5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146148 Malicious code in phoebe-dactyl-hydra-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15069d6c517ba07a6ed22a9fc3941b90f3ed7cd9171a1029f4f45dd9c8976e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147425 Malicious code in reveal-md-query-gemini-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca14348c26ccfabf91c669c1372240b7bca296b2bdd6003bdcdffc57a236249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148230 Malicious code in sqlite-jabbah-cross-env-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d06c65dd6879c5a5f056def2f439bf2bbf1c84c6df10a32dbdfebb777c6615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148002 Malicious code in slidev-convict-heka-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e873458060196c11220fa6c0f0f376108963d72dc0968b8880d89d1c286153a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148417 Malicious code in sync-centauri-impulse-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714eea88b1ac1b803edabb28accb30f2b86addb9885d388aa105fd12c99bf508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147150 Malicious code in regulus-loopback-gravity-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2e33d869936b58fdbe291e2439f8c32c80eef4c3f563b534efb78ad4bc3f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...