MAL-2025-139448 Malicious code in antares-wezen-octans-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7134778e0aba5cfe37ee12afacea92571f5f0fdaffaad402a05daecca4e96d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146319 Malicious code in polaris-aether-andromeda-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7009e80bdaad4a73c45ee93f70c3e3863bf048aabe60ccd5a236ceef5e5ff17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148250 Malicious code in standard-bootstrap-restart-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d44fef6ebb0b24d6d2f1ebf6c0af401ad84e3fad782b5e15cb6dd526dc9cfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148125 Malicious code in spectron-webdriver-andromeda-test-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9d4668b877ab5c31a2102a8e1c46a26228af74dd3f9e1ca155bb5764ba8679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142084 Malicious code in envconfig-pulsar-ganymede-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d273af31417a606c7ba3620cffa410dc76bc49ce822f63c70b2ea7760ad981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140909 Malicious code in command-janus-xenos-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4326baae54946d0c93ca65ecacf8add96cb2a440dbb025b5308740cec8e138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149521 Malicious code in winston-procyon-cosmos-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5551dbc40563853d6ae0acd4a986d5c867b6b5cbaa8947773d0cb09ede006019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145708 Malicious code in nuxtjs-init-ora-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2ab6c5f5d4fd61ff340323ee7b6c92a0edd0cf2bd80b30171d84397e7304d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149783 Malicious code in yaml-arcturus-postgres-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328014f3eea8432fccfec2d92b8ea016e420ef7d3d74b9c0b304d13eabee4d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139265 Malicious code in airbnb-unuk-cosmos-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce898b52c94e42ee07b7975ef14215d4954b631a47a0c5637fa525a9742b1800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145250 Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148811 Malicious code in triton-convict-yakutsk-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f99bee151fa91ba2c17b175ce75ed36f645a5184e29cc11dfd1aa77a8199ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143212 Malicious code in heka-perseus-jasmine-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f356bb4d61795fc241c8c90b7069725fc6c8e2bbba73af382ed4cc9fb3072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140005 Malicious code in betelgeuse-semantic-release-jekyll-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87256c644c630f974d1a273be5c953ef8236d129ffad8560fa6d5a92e3f92719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147342 Malicious code in rest-colors-xenon-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea9c8aeb5c94be268f5eb954b7f3da9be1607c0683a980ae34c42e812feb1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144210 Malicious code in koa-xml-chariklo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b103aeecc1ae931a947c8a9794fc0e86a300ca5a75eed27352559f2e337ce941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143705 Malicious code in io-restart-less-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f4d0056d31b5a03779d08089412376d33984c089f20b0c1f39e54e7df1036e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140472 Malicious code in cassini-nebula-sequelize-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8b6defadeadfadb68bfd95b13446d554fd4ec1136399b5cd0f0dead9135c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142567 Malicious code in forever-fetch-flare-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4e98e20c61d5c173d509fd0efa7d781ac49aa4774424b9740703ed7156b521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149865 Malicious code in zenobia-cluster-package-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403eacbc4e8c829cda478a410fd600fef4b12a8d2286f53a393b36e45c6f891a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...