MAL-2025-145914 Malicious code in orbit-transport-pulsar-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0ac9a87883bd4a5728f0a6a2441250aab1ea05641e171ea404f77c2d8eb39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139484 Malicious code in apex-pino-neptune-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdb944f658ed68cee18e920c32f8c3cb2c9810b5b8551c7e42d18eef82f85e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143317 Malicious code in hermes-gacrux-meissa-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f58c5e60077088383cddcc226e0f7cff29fea8f77e9046b295e6ede534d6a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149266 Malicious code in warp-comet-csrf-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95efdb76a77c45a47564e1fc7a242ae41eeaa72b4429cab3af068e68a2d8772a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144697 Malicious code in markdown-pdf-nebula-ursa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e869b886c6b587ad65d90412d52a84099eb19a953c7c45b7087ccc4d3723aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144050 Malicious code in jupiter-bellatrix-version-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9767891eaf351f85b649524ef9c02582915d6cd03f4a573811aea342193db68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149804 Malicious code in yaml-tailwindcss-hyperion-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21873df11411c0e983ae620ee75aa54dc13b86929ca05c9b2f03b64c18324d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141328 Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e20a22a9c22769398e8739c99b3cb32ee807c0d7b81540638278571f89a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141915 Malicious code in electron-fork-mira-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cfca6cb2c335fe1f49ef9979402387599d2e54f4a5c4a3ffdaf8a61f577746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142084 Malicious code in envconfig-pulsar-ganymede-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d273af31417a606c7ba3620cffa410dc76bc49ce822f63c70b2ea7760ad981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144810 Malicious code in meissa-ini-zenith-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89373e197799912a2bb2392da8e17d048f550b9e4c9d2d61fd6d0a6643a328c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143866 Malicious code in jasmine-spectron-andromeda-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e866e191c768ffc9613fc848c8413085a60f1120771feb660c7f58664e0e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141059 Malicious code in configstore-playwright-charon-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d23e4681498a17b8540942a340a8b572177655a82088cfdb027d1b5ec94388d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143684 Malicious code in install-sagitta-forever-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5266316882adf444b57e1705002258aa5f6cd64e504264dbcb91c1ad0ffb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146786 Malicious code in publish-halley-antares-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39df4aee8d6febe3dd5170aa15617a2930747bc89bdffb22ce7e77513694c593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149060 Malicious code in ursa-jupiter-antares-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9475e6896f644cad679372be114f300b3ac25f0ab22b63a70f074f55dd053c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142293 Malicious code in europa-start-shelljs-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5108c6eb4fe974479b148f8a7ca0b102bd58ee2cf874ab49721bb9ee4552d701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143828 Malicious code in janus-private-phoebe-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e39b17f67223220fe63d32875adfba39ede6a56f0af2b1cac86d9c7bdb1d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140185 Malicious code in build-loopback-transform-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924ddf85d741db918c5a6d6ebd1936d82c9d9258cac2248b333c3e1ff227ed44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146670 Malicious code in prompts-mocha-norma-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcafad7150ac059d1088731e36c7e059264a25f901b0fe893009c275bfadc86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...