MAL-2025-139202 Malicious code in achernar-morgan-gulp-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a498c5b041add19cd34cff6f6ea4b481d4f6807e31d95256fdfcc433fba769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141879 Malicious code in elara-impulse-galaxy-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862019025039512d743d8a22f192c01a4be212e4051f80ef7e9fd4891922d583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147162 Malicious code in rehype-auriga-google-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673cbf0729106f6a375f1483305e9e1799186f99e4954e4f043d47daf81b8445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145144 Malicious code in mongodb-yildun-event-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415b4bae99cc9b1568c32a6c2a8aa3eff44332f1ed641713a550cfb1969e937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146258 Malicious code in pipe-apex-cypress-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c9251bec3c2132eb99478399ff90c6752f8467f76de65164ce742f1006f985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143866 Malicious code in jasmine-spectron-andromeda-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e866e191c768ffc9613fc848c8413085a60f1120771feb660c7f58664e0e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139455 Malicious code in antd-gatsby-node-sass-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed01c36eb6a4c2e8b3ef9636874282dd6992510cced87cdd70e89a6867b45717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143056 Malicious code in grunt-chai-impulse-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7201b865b3e0a28841237385e3de63e60d0e7aa6da5ee7b88ec0f34a2bed21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145238 Malicious code in mysql-atlas-heka-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0384815d3d82925d444400be8eccab822c1dcac4b808e9376d9a9aaee606a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143581 Malicious code in ini-apex-ursa-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db345a3df99f8640bcf7211fc77cc9d6d6a65310f8165ea42480bd60fdd7f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141129 Malicious code in cors-mdx-spica-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a41993407581197ea7067a764303b3c1766883415c39928ee3651e5278e64f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149266 Malicious code in warp-comet-csrf-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95efdb76a77c45a47564e1fc7a242ae41eeaa72b4429cab3af068e68a2d8772a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148926 Malicious code in umbra-nebula-metalsmith-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa52ef2c5183342383256462ce7bd6e5e0e14beb32eb9bec251155258b0119e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145117 Malicious code in module-standard-ora-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88755bf75283ce7dd367f4f6818bef472087445a91b70eff84ecce41e2356c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145482 Malicious code in nightwatch-quantum-cosmos-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d523ee12ac9a0f0a61a3f8cc6009f7dad2678b53347d3991cb755d728b8a357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141498 Malicious code in deimos-juno-sails-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e4b06a4470db17fd32754a1e07a0049aa27cd7bbe27db48e0a893f47e90d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144060 Malicious code in jupiter-lynx-pipe-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0162a2d2a68d0f59d54a1dd129db98281cea0bbd3ce97be9d571834ede434b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149828 Malicious code in yonder-acamar-terser-webpack-plugin-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d67598092c99278899708ccaf956db5b784f63e8cf0fea187c25b581869382a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147289 Malicious code in request-changelog-fomalhaut-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c35c542e9752b2646b451d0005227ef866b25937c4e8fadf117e531e46f067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139378 Malicious code in andromeda-markdown-pdf-loglevel-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1022d30d17df30a59e7919fbc13c80d55980698812493846073dc6a911a8912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...