MAL-2025-139463 Malicious code in antd-phoebe-puppeteer-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a146e4fbedce4d4182b6dd893bfe855eb68edfb8e427aef2db8af106af198f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149137 Malicious code in version-iota-deneb-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b339f0fa5e97e5fa737e9c1473c0476739056c2201bb00ed06a6ac219603328a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146891 Malicious code in pyxis-thuban-configstore-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c313ddd34e28e09d2c6edd5fd809ad33e9dc86d5583a6b1a050c1f208727106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142052 Malicious code in enif-less-procyon-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959dbaf3cd4c9e9429acd747e88f46236bc6f84b85bbd2f3e3c72d8325c55465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146525 Malicious code in prettier-vega-semantic-ui-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ccddc931f350244bff54ace5b3dc6f04687058ed8252be92d45cd02ed73a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145629 Malicious code in non-blocking-ursa-postgres-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a3fdd105ee5de4d8319f3c1fc42c4e5a68d5c3842e883524063669fbdc8004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143966 Malicious code in json-bootes-spectron-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7949f422a2eb79d0a9a327fd513f7cdfae04ff228a725a80fa6221a919d05cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147854 Malicious code in semantic-ui-perseus-firebase-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434d4e5d4dfaf9d49ee0ae359f833596501a2b8580d6d1017a79d5082382164a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147911 Malicious code in shelljs-csv-antares-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e0289f23944cbef7e11f6498fa51536ecbbbd7d2ea016eb28509e35c602277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145827 Malicious code in ophiuchus-metalsmith-apollo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e7e51a83f23a65a177aa0973d2ad88d24a3da3dda667c7cf1f4228fbb52357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148416 Malicious code in sync-build-koa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6cdd7c52d023e5b645b46311ddd666abaadf7439293f946d76fb73259ebc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149321 Malicious code in webdriver-manager-io-betelgeuse-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b7ad259d79486b5eec821e49788722b5bff497f8471dc329e58af138fda0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144604 Malicious code in lyra-buffer-sirius-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b52588d74bb90999914f87139a9d767c0c09748794ac5b8677d02a3e90b2a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149547 Malicious code in wolf-dotenv-safe-init-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276f80847acdf6e724ff67d80fb8c48fe61319092838a09349c533b099d4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139820 Malicious code in axios-canopus-kronos-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ade41d63c7f9d1622391ff19a184cc9d7b30bf4422aa034da1f374435842c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570dbfa873169c709ec4b57caa73790937ba24933a3e08d336ce19611108edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horizontal_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc79bcb5a81f82f8ed7c71ef14f19bf018e96b359898de248338dc73e1d6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67a523c8300a06ad1b671247a199d7007231d224f410652f4ef2fd53da260af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-purple-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88da381262350f4dcce284e6843b6eaddf3a9a5e651dcb0e597d9b86213bb3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...