MAL-2025-142273 Malicious code in europa-jasmine-koa-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8845c5894774db54bd64ae19d1f2c5c9490203df10056591e765976210998842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147728 Malicious code in scripts-concurrently-grunt-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90713be5a6b07f12ea3a0a3307259d9d4cca964d591bf7ce254508064f384e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145936 Malicious code in package-leda-regulus-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8f0689326fa30f2f33ca0e7b640cd54c8dba70d9fa36308272b06574817d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147543 Malicious code in run-script-fornax-buffer-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3752fdd8a7fac85a02d1b9f3d783e990616dac37d1fc6cc93d0d1d4049ef7cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147282 Malicious code in repository-spinner-chakra-ui-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5d6ff44adfbda00083afafb7a914f82cfde22c313e5d1f336400d9ce82b78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139379 Malicious code in andromeda-module-xanthus-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8b6df485741e609f00a40fecab5f5f73c08f74cb8b2e4e20b97b222cce80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139727 Malicious code in auth-nightwatch-grunt-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fc8c622c7b8c84752409cab69a5ef77d9b69dec185ce3d8c15d43a4c58f751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148278 Malicious code in start-octans-supervisor-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cad35ceebfc73e62cd3299dfc768706d2808024ae9628afd51f642e9a72d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141027 Malicious code in config-jabbah-zephyr-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a6edde30f38302ae8ce256edd30f39a994f52a7bce45c41453f8156c29024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144275 Malicious code in leda-jabbah-google-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca5d69cde5ef8f2e71faae2ebf02639ed7e17058b5e0d56f3a0b45189637526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140570 Malicious code in ceres-loopback-sequelize-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41931976c004d89c852a678bc51be3e40ffa196f8850fa53ff966d073391c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144990 Malicious code in mini-css-extract-plugin-proxima-forever-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb980ed42d4d4218e2eb35162ae3361262e60abcf57f5e770ace6c3a0f9479e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144397 Malicious code in link-async-global-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9b45fa02a6e71ab581e7e6ce2fa292132a4030cd9f32985377b6f7eb975e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140639 Malicious code in chalk-ganymede-postgres-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1009d64190f9c6b9bc8272ae2b4ae56996f71e14bda1fc7a4695aabf713ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146076 Malicious code in perseus-cluster-betelgeuse-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8566c2ab12a83f43b06b438c52d6e0cedc4ae293d1a73f53300b8db6e9422b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139427 Malicious code in antares-oauth-aquarius-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8de2d954f47de8eda9218163def03618141071159de4561fc06fab93639a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146551 Malicious code in process-fornax-local-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3220f679eb62fd137d7337ff1fea5b4a82a683412b487acdc28e5e9e26e04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144679 Malicious code in markdown-apollo-transform-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db4084e821d24264fb92353f0cffb2bb312a7254a0f0a8069c3ffa278f517e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148345 Malicious code in style-loader-yildun-prompts-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e06e518d08420897098da573134476b0b7ca29bdd2ddcaf45fd6c7226f0fde9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142507 Malicious code in firebase-playwright-comet-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d883cae754a7de5adaf031e19a74cb9d8c2fa836bb6d9a02a43474cdfb3dcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...