MAL-2025-140289 Malicious code in cache-xerxes-upgrade-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 802d7a7f0ae8fc2df51dbbcc7b9cdc31fbeb2dd2584a21fc7a4905eec8e8f72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146729 Malicious code in proxima-process-grus-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e2ea0253eb4cbcf28c3e8526b146995a264704021ae0f5ee845fc8dfb8f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149060 Malicious code in ursa-jupiter-antares-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9475e6896f644cad679372be114f300b3ac25f0ab22b63a70f074f55dd053c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147206 Malicious code in relay-nodejs-gulp-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9ce85998f19be660fd01a665097cfc83355d9d6c8b14b3f39487793e5dfb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142875 Malicious code in geckodriver-miranda-mongodb-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8b3f508ce99a7cf07e6d280b4cc7f00d5c36232af66cf25d68dc9777b6cf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149333 Malicious code in webdriver-manager-scorpius-ganymede-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5285e61f586138fc557d3e0929f99231cfa05eaf4a8ae41d7769f30ebd2e99ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144240 Malicious code in lacerta-geckodriver-tool-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8ae917a5908e869976d6341f9b536915f6556c4e5f81dbad2c4dcd8bb32526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139709 Malicious code in aurora-readable-callisto-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eddfb3159d163d87730d4aac6ea741f38f591cecc27a0197f72edc1a0747bba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149266 Malicious code in warp-comet-csrf-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95efdb76a77c45a47564e1fc7a242ae41eeaa72b4429cab3af068e68a2d8772a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144174 Malicious code in kinetic-impulse-polaris-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141129 Malicious code in cors-mdx-spica-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a41993407581197ea7067a764303b3c1766883415c39928ee3651e5278e64f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144115 Malicious code in karma-phenomic-standard-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e33101a4daa0982432ad2fd50dddbb6bf3d524f23b9ef2235151a69c67e0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149467 Malicious code in wezen-rehype-redis-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14375635da7a696cea600e454c822828dee6718526529d62006d988686dcc595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145231 Malicious code in mutation-rest-mongoose-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0a079ebfbf35826223a4ed7a0397e374dfc04468205ee22c2a20a8b5d25fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148128 Malicious code in spectron-webdriver-chromedriver-sagitta-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06f2eec608e17c83e990fe681b4c5261e230d77ce9cac37d95422b793606bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144024 Malicious code in juno-elektra-tethys-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd6a416be129d48542f77dac831defe147dcb7b21c8048a07c1b70bcabd3b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144902 Malicious code in meteor-chalk-csrf-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0aba9b08ce2f5a603c22c08ef31c975f98a0baaed6e08c137c3888d64fac1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149735 Malicious code in xml-start-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91eedc1264661a331bb5bda407d0b16cf6ff42036d0c67981b64050be0744e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144697 Malicious code in markdown-pdf-nebula-ursa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e869b886c6b587ad65d90412d52a84099eb19a953c7c45b7087ccc4d3723aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146664 Malicious code in prompts-hercules-markdownlint-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07b854f4be56a57ab029d933b752ea4abf4a14098042f73d4b571fd40263a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...