MAL-2025-149522 Malicious code in winston-procyon-norma-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a7b8a2c352bbf7bae65cdea75bbfb5e043e5d4200b05dbe0ac09a2a07df52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143250 Malicious code in helmet-deimos-enceladus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6e531a39369437b0527d81e78bfd05af9e42257dbe3cfc838ba5a7f11ebb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148317 Malicious code in stream-ganymede-semantic-ui-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d2d21c2aba42884dc74a9306d2b5780925eac3e6e9fbc5db65bb2e22d780c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-airbnb-apollo-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497b37af348964b032eddc3ce59b194d73d50bcef3f435254bfc827f0218a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148587 Malicious code in test-winston-eleventy-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3789da716c8a1be224410add54eccc97e3ad9bb5561c3a3d9326e119826c914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145195 Malicious code in mui-betelgeuse-chariklo-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300f12d26957e00101409aa7e0c2cfb856fd8a82c85b7b2a264cd249f286106c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143274 Malicious code in hercules-ceres-jest-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968504ba2b4fd0f91b0925a1a6f37f0f562d4535dd22ce439ac50ad7e2326765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140409 Malicious code in carina-eslint-plugin-async-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c48ce8ba7d435958b6830b6a8a7fe21a24780cd82d392645324548f91b988f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149184 Malicious code in vortex-loglevel-deimos-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a15bdf3c8662d095749c92ca6e42d874ed013fb01d41651bb4bba8068a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143092 Malicious code in grus-envconfig-halley-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685e558751be0ff44bf9e4c96d7586de4b6b3509fa5eb90db8718448fe4a02a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149039 Malicious code in ursa-andromeda-avior-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92b9cdb554417f4a121dc2e38d5188925f4ffd5d976110e975aac9951bb27b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146047 Malicious code in pegasus-readable-request-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8937ff6041de5d507174ef62c688dad04838d26846a186dbe6f7ddf944c3ff94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147777 Malicious code in sedna-mongoose-mdx-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685c7f1a1ccbaf9d2854a73087c26e670062432dfb5c8300287384444aca577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139618 Malicious code in astro-test-corvus-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6382e0cad627d040444c87f7effe7c6a89f01da98d9d02c5251e2f3881960d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144591 Malicious code in lynx-dotenv-safe-nodejs-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6919ad399f328ce955067abf86547693652653aed9b5c770929d62db585751ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142631 Malicious code in fornax-loglevel-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4564c10a88dbb40742a117cd51e90da16d563a33c2464c01b686df5490cb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144160 Malicious code in kaus-vuetify-deneb-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fefb79e2456ee39eaac3f8098f9bab91b03aae22ed83bb9fa8faf7cff8769ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148282 Malicious code in start-stop-terser-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51be2fc585f72ac5e1c652ece518c196302ce3e5048abec0a7233a0cdc0b4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141782 Malicious code in dotenv-safe-wezen-loop-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfbd1335926adf07b4842df69761df017e389eb233b6ad9b629bb51f25ea4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144988 Malicious code in mini-css-extract-plugin-postcss-hapi-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01be8cfa96e4044e64f8c668c0d1417368b0897ee88586a73bd7dd7c873c629d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...