MAL-2025-140825 Malicious code in cluster-elara-eclipse-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048347085c1a35d570cef25eada38c7e80fdabf3e21687fae65165bcf3933e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145903 Malicious code in orbit-command-geckodriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143265 Malicious code in helmet-taurus-json-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa8f878080b3f1d618d77198ffe1d437ac4e94d3ba1fcd544bb172f8ea9a1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139794 Malicious code in await-castor-middleware-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce9d7732b56596adfb5fda97c2500f0a29f16cdba6713c3badf04c3d81f0b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140560 Malicious code in ceres-cressida-lacerta-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5782a627057146e68a55be11e14e87622c4c6bd1c1a888751f2495c2f61a78cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141356 Malicious code in csv-rollup-dotenv-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbfd376b20d7c927d759df845b61f43d5cd74bc86cc52db2c87668773d234bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139560 Malicious code in aquarius-webpack-apollo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa3d71e1d7a0e15bb88b0ed383e56df383ddcdda804b23c3df1115b266cab90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139957 Malicious code in bellatrix-spawn-iota-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e02a2735f04330ceaa2f373020d5d6d3640831bf53b240730c047be4df17a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147837 Malicious code in semantic-release-sass-loader-commitizen-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4674a8c00b8aa7f7eb8e8bdbc905e54e284119d17da4639e07eab14a901585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139576 Malicious code in arcturus-start-pegasus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35436525dd6b4cf63fbf834e25dbbeccaf04d6ec773097a25064e9d4254286c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146154 Malicious code in phoebe-jasmine-betelgeuse-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868bd2cfd9d3ae551d1149b5c520a17d12b7cd3419667f53c2c09909b9312d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143884 Malicious code in javascript-nodejs-lint-staged-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950a7016236c5fc899c18a2afba5edad822d00009aafafb79a9a52e55dd8a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147746 Malicious code in scripts-sadr-parcel-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d4129ff9bff98bbff961f993a0ce01ca0fe2ec0098fc4f27ecfb22382b00c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141020 Malicious code in config-commitlint-config-angular-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bdbdc79d93ea440f525e4fd0e99adb460f2672fb88a405befb6ad65a363dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139250 Malicious code in airbnb-centaurus-command-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb684e5f5d227b205b2a9cc827bc42da961dca574ec34bd8e32405d67c4ca1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148146 Malicious code in spectron-webdriver-winston-vega-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc6bf05534f02b480ed0ff958277495405277626318a639399b5bdf20a51899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145260 Malicious code in mysql-pegasus-restart-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7009905cb8f53560de954853c4d20a219c322493bc7f7bc00c89373ad493a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139883 Malicious code in backend-configstore-ultra-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3f101f40a801f8e4c2f3629648799481e226d2d379a8ff859c31cc54d24cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149751 Malicious code in xo-metalsmith-soap-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3eed56ac6234cf263ebbaef75ed8de7d887c7664524ec5fea3555447a22a469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143538 Malicious code in impulse-dorado-despina-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cefd70daa57b4e055538e0ce816ca1bb2a0bec9c6dbc3e086630de381272fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...