MAL-2025-142120 Malicious code in equinox-electron-mutation-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452f0da71958284458308f2766fb474ed2aa1c1d6740f3b92cbec0f8751cade0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147949 Malicious code in sirius-eridanus-slidev-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7427c3c55cf749fe9f18beb12af7f752ff375d04209fdd944459a4648ab7a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141226 Malicious code in cressida-cosmiconfig-bulma-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c22c0927ca3f278d5fc1401aac47dc002fb3c8939f62a0355e42fdef64a16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141620 Malicious code in development-exec-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a304c47087ce6235ea11d67ae22402da93443f443c701408982475b773bcb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139911 Malicious code in barnard-luna-pulsar-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a6771f76faef39f94576dc35d54f956339cdad234d7db3fc5e7ce40604123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147542 Malicious code in run-script-eclipse-library-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba95ca976be0c959429a9d1c12a3807c824cad259d8fec7ec0d2aa123e97b477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141042 Malicious code in config-umbriel-tailwindcss-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b504ad2784be5eabf4f348d8bacc2bca3fca7f160530f9e1132f55d1142e1d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145273 Malicious code in nashira-farout-sass-loader-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d9425595d1a523a7abe4f4f6cb677814185a26cbbe69eb2ba49c417075590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145302 Malicious code in nconf-alphard-electron-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56efbf37a7c3c9f8f377dd8543c4fb306af60ce943f5db4d631ad8a3ddc5a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146244 Malicious code in pino-pretty-sirius-query-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c73b7c75b3e6d45e3910318ed625d09bfd01135b8bceedac98a8b4dc0c0101e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140825 Malicious code in cluster-elara-eclipse-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048347085c1a35d570cef25eada38c7e80fdabf3e21687fae65165bcf3933e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143148 Malicious code in halley-install-pavo-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4e6027a9e5ed23f0c187619d11b350f940038da89434376ae24c57a4c84cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148367 Malicious code in subscription-test-protractor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1172938e85e672a705c123845243e3c77d61349e623171947cf7b653919b6587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139794 Malicious code in await-castor-middleware-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce9d7732b56596adfb5fda97c2500f0a29f16cdba6713c3badf04c3d81f0b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146154 Malicious code in phoebe-jasmine-betelgeuse-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868bd2cfd9d3ae551d1149b5c520a17d12b7cd3419667f53c2c09909b9312d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145900 Malicious code in ora-yaml-yildun-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09671570cc0ec4dbf6e1be086b159d12ee823cd32564bfae08539f2b51fce710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149726 Malicious code in xerxes-yaml-ini-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ded0ab57406dd6b25eed7c5ecfac3f5c9075e59f938608e40d47ab3b68cb6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139515 Malicious code in apollo-hapi-soap-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b11768cae9dce591b19f0b3aed2b0ce4d5df76c62962d608ab48fae2fe65d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149664 Malicious code in xenon-sync-despina-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369147ecc3fd9f002d219d214dbb663fca66744f31c9b335a4d8d3c6307092d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140502 Malicious code in celeste-astro-corvus-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58e3d277cff82825e0b421686cf2246c1d36a3d87e8248f7367a29975591f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...