MAL-2025-146136 Malicious code in phenomic-json-nodejs-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e01dead8d8853b5795ad6a7c6064b9c62e43df2d92bce5cd0c4644461caa69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147858 Malicious code in semantic-ui-tool-fornax-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc452a16821f632b60df56036af5151063884ee1b108f2aa9dafd78573f9d437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139249 Malicious code in airbnb-capella-lint-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b80181a2fddf012d48e5ae7bde1413806b7a1f47e0c32b51dd8cd7c05f2c632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140396 Malicious code in capella-rocket-io-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc3c5393b7fed0671dbe77da2928e386acbcc6663d85e74b8de4a915d0a5dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146005 Malicious code in pavo-pino-pretty-chariklo-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad8694ae5e9e2fb525de2a361d94caf1cc4b51939e350ba2974d62c71dff68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139219 Malicious code in adonis-virgo-cordelia-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e07b7ec5a3ebdcdcfced2c14aa60be59406831219a126661a9b616532b03b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144723 Malicious code in markdownlint-lacerta-solis-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a350fe7ddc11ca9a567e3847734b551ccef89edc4b2674c0c9470a0aaef37b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147653 Malicious code in sails-neptune-scripts-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a8c4d785880a4830371576fc6fc390a6d9f398e94cd295857726be3b82befd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-csv-bellatrix-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d3973375d954986667ca7aa33aa2b77e079ce52e861180f1ea202f3071fdbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139448 Malicious code in antares-wezen-octans-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7134778e0aba5cfe37ee12afacea92571f5f0fdaffaad402a05daecca4e96d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146342 Malicious code in polaris-fornax-betelgeuse-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3404c1a6247e9db097e33c1be9d5720d9c12618365536e813f891f26d2a35942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140250 Malicious code in bunyan-nightwatch-frontend-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825844c3a75d5cdd409cd4763e9f2f4de5198bab30c1a6ef5ea1929885f6f599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141910 Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7777d64a1343f42e8f80d8f8f3cde9e71dd74d38f9850534c9214756d79df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140895 Malicious code in command-altair-europa-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4431958b7a5d25de1134d1791fd5552fd6b077c0313112a030d1ab074c1a4a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148598 Malicious code in testcafe-kinetic-meteor-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656c9560ccd17e180daf4aa2254dc60f3255420737a36176c05728b8fdec1786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145202 Malicious code in mui-enif-octans-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35d0a5b9ffc2decde1b6cc5b23bf7b0c2c7016a282c07204a34fd5864eb48c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148690 Malicious code in titan-pegasus-transport-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10990bdbf8ebcca8bcc01d9ba3c1ab248f0efbb2723319e0abfb784fcd048416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141316 Malicious code in css-loader-soap-elektra-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02bd7db49f120b636f5d8a86022af64e2403f9c6397fdaa301235a9bca6c2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141474 Malicious code in dagda-jabbah-xenos-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678aea84d3e17daf26a71a1227863e69cfc430bb5d394a840da880b8ae787a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141102 Malicious code in cordelia-meteor-figures-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2f31812e41d80802d25f048b20a70c312ee134f0351b57c00e9e1987bdf010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...