MAL-2025-149851 Malicious code in zenith-gacrux-tethys-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7db5be699ef4ba8aeea257073baddc1b5f80270191b531880ceee13acc8a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149480 Malicious code in winston-blaze-convict-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149106 Malicious code in venus-deimos-public-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d0d778c8df669fba403d905c69e073ea9e7cb886541e7d250b5deeda1742b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146000 Malicious code in pavo-less-loader-convict-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bd14deccdda00ebe2d12bd079dde2bd5bbe69e9bb4335c43239ee0a5abf57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145977 Malicious code in passport-barnard-server-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61fcf20659588f41f80abb03c011da01e1bf19d78058387446b81977e811089d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149547 Malicious code in wolf-dotenv-safe-init-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276f80847acdf6e724ff67d80fb8c48fe61319092838a09349c533b099d4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141811 Malicious code in duplex-hyperion-arcturus-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b037a874f79cf6d1ee2fa384ac6fa8c11315b800a55c5ecfd7b9bc38dad0702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140836 Malicious code in cluster-sync-development-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ded04885cce013370c43c85d9b42e94e798f39aab69a13d49118a8fb5df4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140053 Malicious code in blitz-oberon-ophiuchus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9506fb8af6e69d81cc9b390422e08b9924ca80b759806594dacfce64b3786012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-standard-element-ui-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ce0f3bac1b17d65b475013075f790254b11c5a89bf35d1a2c597f700d9e42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-json-release-it-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edc6039f43772804867eff0feb0b3fb834d4017115e87fd7edea16f77618515f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-webpack-pyxis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994acb7375c148cf98fd41c7d4000a60a96427b65948c9d9840bf97226b652b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-levels-commitlint-config-angular-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac128b29c04901328bcb6420c6ca7c26bc5e847daa6dc52991d4dc227b7dbe23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139532 Malicious code in apollo-ursa-tailwindcss-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c5055c4409c3fb1e231a35760c7bde61d90da1af4606587d4ebb0be38a6c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146108 Malicious code in perseus-procyon-hugo-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cbc891ef57a039f013ea6cf1f8543491dfaf10476bd98ffc8f915a00739772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148416 Malicious code in sync-build-koa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6cdd7c52d023e5b645b46311ddd666abaadf7439293f946d76fb73259ebc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144681 Malicious code in markdown-bunyan-sass-loader-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75ba6abae34bf7fff5d43af7c07946d458f794e386d3f8dccc26010f8bfd47a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139765 Malicious code in avior-dependencies-radiant-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39db691166389af7eb41e33b34e652b4a60d102ea2c9b17977299e7f021f730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143766 Malicious code in izar-transport-transport-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618328e12b0ff637ceb1688683a924234b65fbda44e8fcb3c6a3ad3647166f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142402 Malicious code in farout-chariklo-jasmine-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afe9386e40599cb48ff675289b6a309d488a323951b6c444ce1455dcfa503d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...