MAL-2025-139747 Malicious code in auth0-forever-postgres-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b82056a31b43b01d8c289b59dd98b00ce4269e59a1eb05e83db7933f8f3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149873 Malicious code in zenobia-sails-chariklo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd4814d994186a5660f22e03e2f758cbfca20ba3b3dd80dd97a01dac7ca3a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144260 Malicious code in leda-cassini-wasat-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe536149b5984d6f38d2e057ecb9354817629b3760fd434a34a929598c89dc01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143929 Malicious code in jest-meteor-centaurus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbacca549b788fec5ad0c9e1142e7c3f46b32be1fe505973ced9b749179f29b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147552 Malicious code in run-script-testcafe-astro-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7916e8a378d8990513632bf657bae538eb3be1e67bd7c5848e1e1e906953cb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146622 Malicious code in procyon-update-nestjs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706afd176ee6df8e6faa2ae433810bc6eea5e2fa845c2dcc19eb0868e4602449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149372 Malicious code in webdriverio-indus-puppeteer-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c0e3f43d11407c4967436f5bdad502a49fa32569364004308ad2437a3c249e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144107 Malicious code in karma-galaxy-proxima-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9112f00b5571a200feea2b0e349052f65ea550e990ee66858706ef898b5833c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140449 Malicious code in carpo-mira-restart-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1338397dbe4e92f39d3c40c186591ae1ad77a9bfd7a198bac2c4fd27af7e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-antares-acamar-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4be9703bf4d22ebe29e9293640c00a146c0161d13f738861168d90cdb9b1e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149638 Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149609 Malicious code in xanadu-run-script-ceres-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139609 Malicious code in astro-izar-nova-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b583ea4560f220551e95bd3c98bc2ed79453362f6bdc60b3ea7b69cba8f1cf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148901 Malicious code in ultra-nightwatch-commitizen-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba7ef101351f596629e0364d0b2222171328d574d9ce623ad8780380fb406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145961 Malicious code in parcel-karma-remark-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b675f3b0e242eb28c37eff42047754b0b896cbd5ec4452299033902d1bc3b9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146923 Malicious code in quark-csv-draco-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9080c335f4716783b757edb5e4194b3a55d2cc2f22771bd3c9e86bb62589188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141217 Malicious code in cosmos-query-wezen-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468aedb812e50306a56e615d514ed9f35ae023813e0db1c14d286f4840e43e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144414 Malicious code in link-meissa-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d8a7b6e669481fa904e09e533347207b654c2c73dafbc0f436908439741150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-lint-izar-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d39e5be3a3dfd646a8309b4a091a11312fe296bc257aee1044700701d6db189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...