MAL-2025-146204 Malicious code in phoenix-pipe-luna-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442e56feb45790e8c8f63b2efb8281db7566c164250bc9f04efe45622367d75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142608 Malicious code in fornax-blaze-regulus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42d941289830df9e458b4dbb4977d2dae6d081ed60d6e31cff91bbfd5fffa8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146834 Malicious code in pulsar-iota-fork-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2e6dbb25e8df909f2e8745754a5e1c6dd9726eac927c26461505360a78dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145131 Malicious code in mongodb-impulse-cz-conventional-changelog-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b8b360a5dadb05d9cbb10f9de323e7fde5d751877b4f12018344d078f414a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143226 Malicious code in helios-arcturus-rocket-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6fb61adc850fdd19f68526676fd00186f6fb9efffd1d06c0d66ab15eaadae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146139 Malicious code in phenomic-upgrade-library-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6da63fbfa2e892e0a97bd188c12afa9f4a7f7644759a1b77e0465f69de6903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140067 Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145936 Malicious code in package-leda-regulus-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8f0689326fa30f2f33ca0e7b640cd54c8dba70d9fa36308272b06574817d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146463 Malicious code in prettier-cosmiconfig-testcafe-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94558dc09e28a2252d27bc8b69d4d03177b6d3655180742a12bc8a19bc55014b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145341 Malicious code in nebula-electron-perseus-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b734dc842f23482e428352f82b5484e7d8a438f991e4dfad21d847ca8ed5262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146122 Malicious code in perseus-typeorm-mongodb-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc83ca1e203d8fbb6e77a66127b5b0d18ebe78c6a50e0dcb8417c8e665ae8a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143895 Malicious code in javascript-websockets-neptune-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40c1fc54cb251468d40fb099bef3a0d38a64ef7923792843c8cd11d5e3554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148507 Malicious code in telesto-zephyr-cache-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571405bfa84576d662602f2683b141983534b474d08b251713f2786dc45183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142042 Malicious code in enceladus-websockets-iota-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3366cd78a51c22a06baf1fb6daafc61aff9b06706b49c03a769c4f3c12811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142874 Malicious code in geckodriver-miranda-development-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd5b8f4b034d6769a2c809520c6cbc938c518d6dda7799b7a6b0eaa61476e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139374 Malicious code in andromeda-config-eslint-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c85ea7c1863642aefcd2294c864ad7325e4f249478d498aca5a7d4f6e06a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147411 Malicious code in reveal-md-grus-middleware-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5aeec93a734c0dde2c4d4e430a88ca8320a46fe77ff5af7125db03ad02c7d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149116 Malicious code in venus-mocha-start-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d1cc69d270a33ba2ba84e61c8cfdd3271303ccc4b24590d7adc20af1c71d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149829 Malicious code in yonder-alphard-package-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505376feba5cac53438c7cefd9cbe12346ab78f4c2b66e41d8a29fadf65b05b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146260 Malicious code in pipe-cygnus-telesto-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26599798d1f508b4a74bcc9c1d87ad759a3e61e6ede05b60fa179cf208d6651b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...