MAL-2025-141099 Malicious code in cordelia-enceladus-cache-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778edb01bb85f7345c2bac7bb6151befe15e9172b50b7b58d43562cb74c2466f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140202 Malicious code in bulma-antares-update-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da90409dae49766f73cccce1aa6e68c01b0cdeb89095c307fa9ed01a6e3d9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140774 Malicious code in chromedriver-husky-flare-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427eea3861085f119e61e49f48fcc8a63b170484eae6227054dbe4fe1b2baded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146593 Malicious code in procyon-ganymede-foundation-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd8ff9b18481f1f0e39f42b03b654b1dca4dc879cf92f172796dd1a2a2aa249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139622 Malicious code in async-centauri-sirius-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca14a1da00800015fca446d7d09a88bfc7acac6b6e0fc7317667e1f503deaf6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141035 Malicious code in config-promise-weywot-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec8c31de4eaa83af600a570d4fbd1f760af8fac9a73751a0902d639cddafa421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143911 Malicious code in jekyll-norma-markdown-pdf-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadcdcc348ee3e2427e061db339471ee520e3dc223c25f9e41dd0092d58d434b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149515 Malicious code in winston-nightwatch-sagitta-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da665bbaad7488248480eb32e269a4365ff5d2185af8c41490d02639d46dc5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142141 Malicious code in eridanus-atlas-jasmine-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc87488aa9c8d7ca58ed718addb38c591006dc1b7cbc23c931a5cde9d6d8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144400 Malicious code in link-babel-test-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c03bc6eb57af4be938384971609abf1c0bf21731f0b1d63ec7163677493ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141168 Malicious code in corvus-tool-eris-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149596 Malicious code in xanadu-fomalhaut-umbriel-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0060fea0540af3890337ee8a42aefa2ed30ad48822bfe313698e497dc0b636d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146643 Malicious code in promise-markdown-zephyr-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387a151346281441ebe5a92d11f527bece4335ed634483aa3ab8fbaa90bcca42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143735 Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145361 Malicious code in neptune-exec-radiant-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce87bf0b08a74698999d56c5a3296ebdabc37d9c80495022b80d53ee5f989239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139923 Malicious code in bellatrix-antares-halley-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7459668e9fdfe7e25259ab0a5378deeef5aab39f018a73af01ee396aa5f1f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142390 Malicious code in express-pyxis-sails-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1185fc0d42439e9df48781b08bbf46abcbb40b9f5715d77e835e5d53d1bbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146670 Malicious code in prompts-mocha-norma-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcafad7150ac059d1088731e36c7e059264a25f901b0fe893009c275bfadc86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146010 Malicious code in pavo-subscription-hyperion-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab658b5d1b09c534e627e2c84470d76e524048050405bfcca968ad892688e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143889 Malicious code in javascript-readable-fetch-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3827cbbd47b302e1ef59e4c94ec650165f357e5bbd37b488b09940b80b763a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...