MAL-2025-143155 Malicious code in halley-mensa-prompts-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855e3f107c149e03bb867dc4f32af1a5ac1d3d7995590bfd0e43e51d71189212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146923 Malicious code in quark-csv-draco-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9080c335f4716783b757edb5e4194b3a55d2cc2f22771bd3c9e86bb62589188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149276 Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144260 Malicious code in leda-cassini-wasat-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe536149b5984d6f38d2e057ecb9354817629b3760fd434a34a929598c89dc01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146622 Malicious code in procyon-update-nestjs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706afd176ee6df8e6faa2ae433810bc6eea5e2fa845c2dcc19eb0868e4602449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144862 Malicious code in mensa-readable-nuxtjs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996539962812e89f55620996e24305e3dcbcd5363dcbbfa86f32540a8183ba45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149873 Malicious code in zenobia-sails-chariklo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd4814d994186a5660f22e03e2f758cbfca20ba3b3dd80dd97a01dac7ca3a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141533 Malicious code in deneb-betelgeuse-prettier-stylelint-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69150f9f33731a4330152efa49e47de700c1bd6c725073e76a1854194a83675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144020 Malicious code in juno-callback-pegasus-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38149d9fe8687c7e2c46ea0ee733ed9a8894eb2c8cff4bdec6a64bd7493c91bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146307 Malicious code in pm2-query-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e862fed99ae944003c9fc385a730be19c4484e4de753e2d75b84bfec326dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149884 Malicious code in zephyr-epimetheus-leda-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93bd7f26a0d6052f2458fbd2a4d3a22ce879f801883dec1ed4265a6116b6f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139508 Malicious code in apollo-elektra-bellatrix-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4571e223770be66c1d9123e17f3212e244d541f4f69186252ac67fa294deb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139747 Malicious code in auth0-forever-postgres-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b82056a31b43b01d8c289b59dd98b00ce4269e59a1eb05e83db7933f8f3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147552 Malicious code in run-script-testcafe-astro-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7916e8a378d8990513632bf657bae538eb3be1e67bd7c5848e1e1e906953cb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149372 Malicious code in webdriverio-indus-puppeteer-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c0e3f43d11407c4967436f5bdad502a49fa32569364004308ad2437a3c249e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143929 Malicious code in jest-meteor-centaurus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbacca549b788fec5ad0c9e1142e7c3f46b32be1fe505973ced9b749179f29b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149358 Malicious code in webdriver-mocha-nashira-aurora-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb31fd775f1268ae9f1b1b064a05a45c2af095dc6bd9245bf60669d8cdf8df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149512 Malicious code in winston-neptune-standard-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6100c7d0ff6d29306a6d718fbbbdcad4feab4d3512e557e86af8454531cfdf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143515 Malicious code in ignite-izar-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0894c7a3eb9e5f3c158e630bc71fbdb660de946d7d0a92955c82af30adb08ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140449 Malicious code in carpo-mira-restart-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1338397dbe4e92f39d3c40c186591ae1ad77a9bfd7a198bac2c4fd27af7e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...