MAL-2025-145915 Malicious code in orbit-triton-request-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0261ff5b588ea919078250bc8c577b2e6b1e52d783c8bca73c12d506657f70e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143907 Malicious code in jekyll-javascript-draco-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6d1b5e23f5b42bd7a38be0d7cee36fdd4171be8cdb7f30aaa02cf2da7e5680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141568 Malicious code in dependencies-fusion-prettier-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b282945432c3d34eb90c67d81f9fdba5527b68fe207aa9b76015411e02c7438b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142147 Malicious code in eridanus-install-supervisor-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1376bd5cb9c0baf92baabed9c0684dc0c88040e298eda6fe848c4b721834c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149172 Malicious code in virgo-toml-passport-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584f8b619a6b42d51e3495d518d1c3de32ee362ccd4c539987a484b1f3711094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145542 Malicious code in node-sass-google-node-sass-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916a91c4d8ed0d001a8049bf53130bc5cee5f30c571b7bbcebcb9ee50036dabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140894 Malicious code in comet-vulcan-mdx-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f65149a14d2b9622e50849679ec66950763e1cd38846e1c80e2e13fae21197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144127 Malicious code in kastra-pino-equinox-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda6bdcbe3cbb6ef8ab1bfa09ae585d6cc0e53b722c68e483091d717214b52b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146731 Malicious code in proxima-protractor-mira-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05006d9d7135e2d50bc05fbcb93a478556d9f31bc654760d8bbe915920ba941f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146944 Malicious code in quasar-cosmiconfig-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76bb28548534fc01c9b0261f4267dbbec430eb9d246820b1104a172a156064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141676 Malicious code in docusaurus-rigel-child-process-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19ad6fbdcb00165d7f66f057681a85b17f94200086933314c24754656ab7969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144609 Malicious code in lyra-hapi-airbnb-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65055bd97dcce6cc8bccd65bf096b6499772061ed4af24b831f79df372a16f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147554 Malicious code in run-script-update-tethys-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea68645694de9a182b55de9fa8c58d02c1340608c7676ac3400270fe913aa2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144077 Malicious code in jwt-json-commitlint-config-angular-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8cf9b1c13396fdcaed50f6accfb81507a6b264062567666b0286ca187fbe57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146243 Malicious code in pino-pretty-rate-limiter-xerxes-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abf532044d3c7fd705ec111e6e3edbb278aef7902b90066d9d00267bcb31a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145066 Malicious code in mocha-aldebaran-sass-loader-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4e7e98e5605c713059061d8faf2bbea600f5c269f0c61c5dbfd5a723d4c601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148764 Malicious code in transform-helios-jekyll-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc021b0668f909b84b57151c40a8fc0e71fcdfb248bc540f7fffd18a761d5f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143726 Malicious code in iota-gulp-colors-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8431bf4a128360ee6043e7c52edf66bbce754f42425ffbe398556515f7563293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146230 Malicious code in pino-pretty-bunyan-aquarius-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3be5ea47811d0b857872514e29ac72bed37f671a39bd04d05eeaf989ba52be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140762 Malicious code in chromedriver-await-enceladus-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b544cd03ff385e714b7cd27f9fc9b522f3926092527344be2f153f530040db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...