MAL-2025-140560 Malicious code in ceres-cressida-lacerta-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5782a627057146e68a55be11e14e87622c4c6bd1c1a888751f2495c2f61a78cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141759 Malicious code in dotenv-safe-lynx-ursa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef6b9e2958f19ca89796a67d8034d818d1ed8d5a1a1807f5eaa07c7468a92e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148229 Malicious code in sqlite-iota-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344171a165d0c3e2a68c971568f883679677b8f5082569c0d17202313d2518d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142865 Malicious code in geckodriver-hexo-node-config-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9530b02e469e54b49153909a3ee6445e77fd868b15f80e7d9f35f3492765f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147732 Malicious code in scripts-foundation-resolvers-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9bbce27bec68a8aea224727202223aabb0cbbb29433c1d00dc58f3a48262bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148043 Malicious code in socketio-acamar-pino-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f52eb5feb86456ab516fbdf3dda48667262ff5ea6e7f05e4fa7fb2ecace47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144047 Malicious code in jupiter-altair-sagitta-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2cbf7ce2f61cd396dd92768cf8f3c8b83ebd104b8aa54aac8d1ae5356dca391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141356 Malicious code in csv-rollup-dotenv-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbfd376b20d7c927d759df845b61f43d5cd74bc86cc52db2c87668773d234bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149664 Malicious code in xenon-sync-despina-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369147ecc3fd9f002d219d214dbb663fca66744f31c9b335a4d8d3c6307092d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148843 Malicious code in typeorm-flare-fomalhaut-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25798a5d21cf8bf514ba263838d6f5650b41aa8b2e72e6e22c72dc364547e4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148151 Malicious code in spica-apollo-iota-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419b488c19ab307d7bb586c2e61e93611f22530d984b9211a6dfbe9e169ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148599 Malicious code in testcafe-ophiuchus-xo-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21214842cd4cf23c4aed99f5eb4277c186325847a0fc2aab7e2c03f867aecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139515 Malicious code in apollo-hapi-soap-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b11768cae9dce591b19f0b3aed2b0ce4d5df76c62962d608ab48fae2fe65d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147542 Malicious code in run-script-eclipse-library-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba95ca976be0c959429a9d1c12a3807c824cad259d8fec7ec0d2aa123e97b477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146345 Malicious code in polaris-grunt-nightwatch-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905ca459a3f52802a6a52f4225effde979ef4a34429d2f47835fde85119d898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146607 Malicious code in procyon-nashira-husky-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8239a6961f37959561c688b0fb1c1dbb97528ebe003447f8f0e644095e4de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141265 Malicious code in cross-env-prompts-equinox-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4705e7db14495cadbb89c51f3f8daee6b48ff5007a23ac673f16535a49b7849d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139947 Malicious code in bellatrix-oberon-halley-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af62a0e9726a0d93c7beb487a2175fd6dd836c21b6b0fb9b04a2bc42bd7fe599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149751 Malicious code in xo-metalsmith-soap-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3eed56ac6234cf263ebbaef75ed8de7d887c7664524ec5fea3555447a22a469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148484 Malicious code in taurus-weywot-zenobia-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542d620ec307287a2edecb637cf7d0cc4db339f51baa18744193fc284ddb2748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...