MAL-2025-148029 Malicious code in soap-pavo-barnard-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c60fb41ebbaf22e751bb38346303fce0e6f2ea2eb0e75b6a3e91c73e8781911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147005 Malicious code in quito-subscription-neptune-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70002200c66b5b4cc0f28f3f46ad6a34726cb88aae438ffc6a091fe5ed4e7af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143466 Malicious code in hyperion-bellatrix-carina-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d1bdf4a11c0a392a600e12d08a06142d23cf402e33d975e8db903eb91dfa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144277 Malicious code in leda-javascript-stream-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfd3a055aa44ec2cd08f62a0923cc30385a0d9d25f8e1cba6f22dcde9d89345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142455 Malicious code in fetch-pyxis-inquirer-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22460db8edd1c2b50d5e673d6618b9ce1467318283c7d01eff42c298a3541333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148149 Malicious code in spica-airbnb-pino-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b41bcb691b34ac087839ae6fbecee64c8eb6f8039658ce929656436fa9030fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143200 Malicious code in heka-apex-firebase-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41f0381091ae082e9458edd8f1ec765ed4a9a451424985ffabe6a53d08441cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145637 Malicious code in norma-cressida-wezen-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c325aea0435d135ada4d781fcd39f53000ae8c2fce613106b6a0e4fe51ce8a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146259 Malicious code in pipe-await-got-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40e789ccbb5f530142799e6b4432dd8fbdcb5229c1554268b72c421195642d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148196 Malicious code in spinner-fornax-hermes-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b265e9ad5f9ea6dabc908ba5c24fc2c13406807bc482c0e554c5a2e780537e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141361 Malicious code in csv-ultra-wezen-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1858d3c966b6f580575064487e3a89444dbbd196a7324183c8b834a2b42ec59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143325 Malicious code in hermes-request-antares-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5735598cc672f8656c24783449a33a750bb3c27163408675778eaa624319e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142362 Malicious code in exec-thuban-farout-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145786 Malicious code in octans-virgo-polaris-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a6c40da24b1f4141514a0c0ebdf430fba06d346f9ac74cf39557bebdeb292f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141078 Malicious code in convict-loopback-ganymede-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104427287b6201291737d63904d566b88badc27604dc3788a575b97b3de23343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146084 Malicious code in perseus-epimetheus-module-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e5beda10712a97e1605af146abe0abe0195f65d2c18776867fc375b4753ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141245 Malicious code in cressida-soap-atlas-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa32ebdf6c7a36c0fbaa79db2bb78384213d5a5f64c6f78fc4f2811bc97f85c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140076 Malicious code in bootes-despina-capella-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d6d6dd2fd50fbfb69d2a5c2e9d2d735e5bce93f882407139e9ebc1e18f011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143214 Malicious code in heka-private-electron-builder-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efc83769ffc86634fb8641fd68519805cdc2c8c3d59fbda9c45f154c7b48d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148197 Malicious code in spinner-geckodriver-framework-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11eda0eff3a31bf162a1a763e086ba1b1fca6028f2c5d4fd7921103126177464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...