MAL-2025-146997 Malicious code in quito-loop-scripts-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf51555f88a1a8beeca7b7df6dca9b552aacd7c0864758490e5cb995fb9be1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148147 Malicious code in spectron-webdriver-xenon-repository-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620581b45cb7abdf6bd1af267c802b423227a4cff2deb036c36590b0e2e89947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139563 Malicious code in arcturus-aquarius-corvus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7008accfc22c14a8af2b886aac5141f689ae9dfc2cedcdee94a9ce96e0ae2897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140714 Malicious code in chariklo-spectron-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d78c278ecff4ebaff38abca456c02346ef98a651fbad21ad8f688104cf4822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142071 Malicious code in envconfig-cosmos-zenith-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efa97e6501b45136b084dc62af1e48cf36e346f9434b93fb93087c77e5bb0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146373 Malicious code in polaris-sync-procyon-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142135 Malicious code in equinox-selenium-sagitta-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca37b453e659d859d2a4912c5d5f173edfd52f43fecb65ce41a309428b30a762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148256 Malicious code in standard-markdown-pdf-lyra-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9734af3a6b4cfc3fe7e3af82e68cffb82ac31f0c0474818b7ab95d397e331d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146165 Malicious code in phoebe-nightmare-npm-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774a47fdb518927067c69933219ba0bfd8dbf5fb177ea54f167901861846ee65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148934 Malicious code in umbra-sirius-scorpius-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7721c0109181d5cc7814e23c29a571aeedbdfbfc5a0cbed0d273bfe7ad968f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140800 Malicious code in cli-gemini-kastra-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6605dccf94532fcc02386fca1e6f9054b5291a3e909cb1a0504204ee8be4880f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144622 Malicious code in magellan-astro-taurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf0ce6cfcc1944002839109c84e81c317bf8ee3ead756f370ece942286982dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148617 Malicious code in tethys-enif-nconf-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799881d4131b02e60faafb9b9e35aa3e419a470cb3672d5b78292cc00b780831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146960 Malicious code in quasar-rollup-adonis-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac168b880ae287e65f1638c1badd728ba959d9184a9c4540169154dec70e52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142063 Malicious code in enif-sequelize-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdaf7d09db460ea49ef4af746993205b3c7f4df469d8757fa497731a2ed8676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140446 Malicious code in carpo-jest-celeste-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5302a6da915ba69b2ef4fa60cdd9d629cec52485a615e36d82215554a1e685f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139975 Malicious code in betelgeuse-deneb-request-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8764e4fcb6d47a864d8253ed1edf3345e21de2108d51e7d97edb476081bf9361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145068 Malicious code in mocha-ariel-wolf-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ccd0516e5a02ce30bc9aa691ace0de847ff78b26204bb4998a2be28a48119c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141766 Malicious code in dotenv-safe-npm-json-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940f316bfe7f76b339bf77bd6623e5b20440bc8d2590a90996d4892bcd221a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145210 Malicious code in mui-rate-limiter-xanadu-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a4757b886e26c5c19e77e3c4467c3c02fd3966f22b96f7e278c0a362500ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...