MAL-2025-148306 Malicious code in stop-transform-ultra-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b60d96dbe7f22ec72e5b3eff029c03cfadfbbdce6f395bc6655514b781d5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139860 Malicious code in babel-heka-virgo-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840c87e2ba9ce27cff91ef872cf38e9c82b5182d865525076fe53fc0b1207117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140490 Malicious code in castor-oberon-ursa-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4008fe130fc6c3a1dae4769d222879a7e07743d7dbaba2fecee04cf629b0e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139485 Malicious code in apex-request-relay-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d1817134d21724214f2fe946a873bdffacb372c5d66c6abf5cb9f37ed49b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149113 Malicious code in venus-hermes-lacerta-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79996a3e99ecc6f49fcc9fe9b797330b934a6a4067b96327cd37fb554aefc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148651 Malicious code in thuban-ganymede-sirius-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e9ae9e62a1196b1a4ae777bc6ae0a4cd8e3f48f279f852f8802edfd651784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146368 Malicious code in polaris-slides-javascript-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea543f41810be6c3ce630f5af28173f14cbe4d825d2570aa9820d13bb7b1da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145210 Malicious code in mui-rate-limiter-xanadu-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a4757b886e26c5c19e77e3c4467c3c02fd3966f22b96f7e278c0a362500ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148293 Malicious code in stop-duplex-cz-conventional-changelog-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af76b88fa4aaf437c60788818714e6b32283015c465970d6620af77d5b1f084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140469 Malicious code in cassini-meissa-neptune-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440a8689e11e8ca58dd101c2d00e557fc2643dd6d830fc6bed117eca5d9690f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145173 Malicious code in morgan-duplex-shelljs-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b69b037c38c91ef9567baf3c3f0f8beadf38d2134de526c52e6e8c6ffd77ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142671 Malicious code in foundation-sagitta-meissa-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cca1b2ab5bd53cc85c6357354786a95521da387fc53eebf4744c794b0ae539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139756 Malicious code in auth0-sagitta-koa-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d93c83ef09b706f1e0c5bb0ea44c3961eb7c8d59ba7634621209328d95356a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144600 Malicious code in lynx-superagent-neptune-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f96e51531e573a2c554dc865f68992d1f2b7b5668f83722fbb84f0dace0aca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142104 Malicious code in epimetheus-public-version-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc3b96a48c694acf88349bc3335188f0008975d6ce32521775b2876d3896a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139401 Malicious code in antares-cressida-astro-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a083a2e240bd569f359ce0153cdcd1078b75e23b0cb92a3fab70d2aabb5c2194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145350 Malicious code in neptune-algol-carpo-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa51c8554a0bbaf6391715e061be40893cdfa1063c0ccaba1c1b12720935395b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144069 Malicious code in jwt-atlas-betelgeuse-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6a66f49bd2c098c51d6b64c9f1b8c603aeebf941927a905ed3e84b7efb3e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142439 Malicious code in fetch-corvus-auth-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de090b94808980372619b8096599353dd43a9676150155c1d8046afdbf5a8d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148232 Malicious code in sqlite-non-blocking-native-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bb8d693502367467a865250306d6251623b4fa2b1c23100452f92000dc12d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...