MAL-2025-145062 Malicious code in miranda-umbriel-jasmine-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586dd2d29d903fab061c45f82a7e5906d9366bb1708107c946f9cd6446b3b48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141261 Malicious code in cross-env-nodemon-sedna-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7316b299b527b2a7aca15f930a3fdfb9a75ba8c6418bd1cf9278ef08797cd08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147894 Malicious code in server-electron-blitz-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8904c00009f7e78edc3add02b97ce60da1c69ccba3ca365bda498e0e7618d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140917 Malicious code in command-ophiuchus-envconfig-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71777ff20b2261fa16a73576b34d21d19d404c983e8f479a1239d8d15976b869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140718 Malicious code in charon-commitlint-config-angular-mdx-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f728589dafa96fc22b16495fcaa1e4b6f0d89a044722caad1f849aecfdf5dcab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148015 Malicious code in soap-chakra-ui-phenomic-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eaaaac6b3b0e3bcd0e7b75f6b8dba7daf39342f5e4058ccbeaf897eb2a1678e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139713 Malicious code in aurora-upgrade-venus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951efc2b516ca82cd5789c5c2dc66c57bc2c3eb4310668eb2b8e0a6946021ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148094 Malicious code in spawn-chai-ursa-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603a1063a78f7e38fe4f0f14980576141ab4a2b8b61770ff4e99fb73146f6944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146906 Malicious code in quantum-karma-eslint-plugin-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82b35cb990310723ae4204e042fc5cc97154cdd0ecefdab8891a6115856c2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149168 Malicious code in virgo-rehype-hermes-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4c4bf9e0a867f395c0915acb3f132a13d802a1a26646349a3019eb4bfc537d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139471 Malicious code in antd-yaml-rate-limiter-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412d07eb97a4f89d1264c3ef0f67ce293e3a765abdab4583afe95d08ead7e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140087 Malicious code in bootes-ophiuchus-phoenix-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cd14c888f39abec4719ca970ce1f6297c3c19feece2bd1c5db6e14e12d9028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140730 Malicious code in charon-polaris-socketio-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765198641ce1b82606fdd938edd1346719d47b28422f609f5126548b170496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145961 Malicious code in parcel-karma-remark-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b675f3b0e242eb28c37eff42047754b0b896cbd5ec4452299033902d1bc3b9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146690 Malicious code in protractor-miranda-mensa-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a8cf61132b136b96bfab4a1fa37e312363717bedabfccced7db087db1b0eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149403 Malicious code in webpack-postgres-draco-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765202ad2c860e75154b78975f19a9173bd6a6acf4f554a2f5f02825a71f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148903 Malicious code in ultra-perseus-betelgeuse-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381da3a96c7e7b45a69ec174da49f251e1a0b300209a66f514d143c7960ad8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139835 Malicious code in axios-non-blocking-concurrently-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236a8064fcbd236de61389dc51da3fda74c28886d8ef01b3e97db6cc6af42cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149358 Malicious code in webdriver-mocha-nashira-aurora-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb31fd775f1268ae9f1b1b064a05a45c2af095dc6bd9245bf60669d8cdf8df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...