MAL-2025-145117 Malicious code in module-standard-ora-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88755bf75283ce7dd367f4f6818bef472087445a91b70eff84ecce41e2356c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142473 Malicious code in figures-middleware-centaurus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed8a57bf5c1a467cb3057d957940dc0b42c95b9b657a545064bed0abd5d9a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149596 Malicious code in xanadu-fomalhaut-umbriel-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0060fea0540af3890337ee8a42aefa2ed30ad48822bfe313698e497dc0b636d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147154 Malicious code in regulus-phoebe-corvus-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0151e5068dc5bce9091a6d205c89061fe9513c7fc09dd31cd433c06dd39012bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144827 Malicious code in meissa-polaris-upgrade-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db7937233c7ae7519dcca1407d39174c3082cb36a627f6276572d315cb4abf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139455 Malicious code in antd-gatsby-node-sass-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed01c36eb6a4c2e8b3ef9636874282dd6992510cced87cdd70e89a6867b45717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140074 Malicious code in bootes-deimos-tethys-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf8276b237457929553c4b5e28b51cc0edc14043dff26620640248f1d6fd96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148329 Malicious code in stream-run-script-got-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9898cba39bc92128e8353f6298e4073eebf5b59f8585aa54ff9d6fbc17669a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147815 Malicious code in selenium-sqlite-izar-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8953c630b9079488ae498842bf4cff37440b69ff8f6b186fe0366168f2c841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141813 Malicious code in duplex-jsonp-zenobia-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4493a244923a35fb8a9ac3f82cca657c698d3415f7a87aa9582c28d6a90acb4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149779 Malicious code in yakutsk-resolvers-phoebe-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f5fdc72d93b4fd8896a336557775e4a55ac8cfcce0a6c6bb257314f79673ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147810 Malicious code in selenium-registry-capella-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ab3f71e7297e293a72649daae86808b298edb1456fd5e8450176bf422af724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-helmet-zenith-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029323854f25d0b890fc15cdfed960fa871990c4eeb799297344b79d60c6b465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-link-backend-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa26e970661dfb370e1a1f47a2210dd68b9872f989fe6114efb9f0564cbe26f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-transport-iota-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2344ee38fa070a53a841bad9565ace23b620ee3a3f80a0565f958d36b582ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-antares-bulma-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a195dc12e34bcddfd2b5e36d9a5c748024e53f940af3a3b5ec6ee8f472a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-dotenv-parse-variables-hermes-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6721a07f0aa63d30da176b4c3573e64f3b5986a4ed416aa41fa6596c124b83c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-sagitta-forever-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5266316882adf444b57e1705002258aa5f6cd64e504264dbcb91c1ad0ffb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144804 Malicious code in meissa-flare-thuban-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e1b7982a0ebf5c13945e41d69ca106c0e229e0026f308ba872bea0d4985002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139709 Malicious code in aurora-readable-callisto-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eddfb3159d163d87730d4aac6ea741f38f591cecc27a0197f72edc1a0747bba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...