MAL-2025-139981 Malicious code in betelgeuse-fornax-europa-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12df85e55e17f239ecb02ac68f2e4aeb2274a82da624b7659364d84ea6c5165d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147367 Malicious code in rest-sqlite-exec-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd13f83bd5c46f13f990af7a80c4c6641d0fe204a19b36b862c00272782aa971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148286 Malicious code in stop-aquarius-barnard-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c424cf28debce1410577b469e5847a0ac3aa9b77d2504b807a03608e3d501ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144565 Malicious code in loopback-socketio-restart-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc135c39dd60c0e9542761abc5a6c9b077de7f18dccf0e15264129c66ebd396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145121 Malicious code in mongodb-cosmiconfig-impulse-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16aedde5124299a67704ac06f0b0969657a4ac78522a0130621fa3344d627407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140846 Malicious code in colors-csrf-rollup-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3babf499c271300aba4371a713b8f0dd82c891ac406c074b37358bb570d29f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141255 Malicious code in cross-env-geckodriver-pino-pretty-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f99bb11d16e020dc0af77a608423045a916298cff6f30d46d7fe9355205208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142139 Malicious code in equinox-xerxes-convict-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8a218e391950bb7e213b36959360050fc42140f58484814757055dd9ca5a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143197 Malicious code in hapi-public-unuk-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d5a3b35db50fa8d9809095d9a28923d3f8749ef04d21133640662959f81ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143457 Malicious code in hydra-socketio-fornax-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e4cfe4008f63bb69f79d8d2d28349e6ac22e9722c9a52f41d03bddbcb3ffb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145784 Malicious code in octans-upgrade-celeste-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6820d8f46993738f98dec508b4393021d4bdbcb9dce746d48ce684c3ee1fb7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147900 Malicious code in server-helios-pino-pretty-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028d29159e5f9101d2b2a1a011bb106477bee002fd2bb59461e1830192383036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145370 Malicious code in neptune-nuxtjs-axios-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfb640a07c1b1d1931c574b6445894114b1830e75f96fb8f44699becae8e49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143814 Malicious code in janus-jekyll-parcel-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146135 Malicious code in phenomic-javascript-remark-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 315149a5727b357bfa3b12aeac62126a15734f48ad61a49ce8b7ce4875619e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147719 Malicious code in scorpius-umbra-electron-builder-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862a2349ffda24c475fb6b50662ed3b2a243d7c9031ce530c284e46c5f71a68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146408 Malicious code in postcss-loader-scorpius-centaurus-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd95c0b4860dbb6693adebb4eb4bee696b2d9c115cda25ee2ee39158905c40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141738 Malicious code in dotenv-parse-variables-yakutsk-farout-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fb13686d9f413809e624fc0ea150f3dafc56bbe463091c7371e70709cf06c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140686 Malicious code in changelog-stop-spectron-webdriver-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e35232b2768c3bb1baf79865a9e648987758ad19e7705710da8c61613fec77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149713 Malicious code in xerxes-pavo-postgres-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d1e32cb7a8eb7a3e3dd6e6082fdd551091e8c76139b2a5bd26959c78e5758b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...