MAL-2025-145235 Malicious code in mysql-algol-phenomic-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ceee4a27ca9ceb755280a9eb2c27cfdd9af03cdda92755b97bf6c68c50d382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146578 Malicious code in procyon-axios-babel-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af51a505a4a19960c6c4d61b29c39bdf29636e1200426e6fc09a4c81cb7a186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139334 Malicious code in alphard-pegasus-server-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfa461d7d0894f0839cb8ce6a4066ce402a451d1bbad3c07e5b954c8e025915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143895 Malicious code in javascript-websockets-neptune-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40c1fc54cb251468d40fb099bef3a0d38a64ef7923792843c8cd11d5e3554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144220 Malicious code in kronos-grus-iota-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db435aa072da87e3cd2d851ea479363d8f2614b417ea1a476c6693b7e935fa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146061 Malicious code in pegasus-upgrade-gravity-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66715409b059a0c688b80772af4ac8b0e473a8d2d8a8d25d96b2b1236cd73425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146122 Malicious code in perseus-typeorm-mongodb-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc83ca1e203d8fbb6e77a66127b5b0d18ebe78c6a50e0dcb8417c8e665ae8a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148079 Malicious code in solis-meteor-element-ui-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07d08f7bd181bf65426ca17d197be99b4431f0b0e6855e93f84eadb534b053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148937 Malicious code in umbriel-colors-vulcan-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b202a8c96f7d76eb0935699e3d6b8e34183dbda7d3dc4dcceb6096407e578437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147004 Malicious code in quito-sequelize-spectron-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8100bdb0fdc2635175097524e7857e5184b12442b72b07a0a691b26ff19208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146551 Malicious code in process-fornax-local-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3220f679eb62fd137d7337ff1fea5b4a82a683412b487acdc28e5e9e26e04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139843 Malicious code in axios-vulcan-alphard-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca1e8b0aa7faadd1ea8a4ce8af230ea758e09ae252e3adbd033961f243ee51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146895 Malicious code in quantum-avior-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142518 Malicious code in firebase-webdriver-manager-vega-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2331c563f4209ebffb0a5c8826e03fcc872d483903190d99b1729555388ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144275 Malicious code in leda-jabbah-google-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca5d69cde5ef8f2e71faae2ebf02639ed7e17058b5e0d56f3a0b45189637526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146751 Malicious code in proxima-xerxes-await-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5410adaf1035021a86a15b259d7ce60dc0365d4b361a661abd6d2fcce409b986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149223 Malicious code in vulcan-adonis-pino-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33067afa4c87ec451b549c0adead53a11a63aafb595a5134d16c9db2b554fc15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143901 Malicious code in jekyll-delphinus-buffer-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5e8c03989ae055f37acf391f30e62c3186125cb4d040556c28201b59b96f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139156 Malicious code in significant_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f8abc8d4aa9ffa2fa444ea71ccde61df434e0d48387cefb28ef5183d25712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-amber-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3b81d04b3eec8d7f7df1055c5e60213c983872f9d7c77f0b56a5b93294253a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...