MAL-2025-149522 Malicious code in winston-procyon-norma-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a7b8a2c352bbf7bae65cdea75bbfb5e043e5d4200b05dbe0ac09a2a07df52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146193 Malicious code in phoenix-cypress-bootstrap-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a728232962e524201812cf8b81e1af61d6b898e4d49532881d086be26173b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149039 Malicious code in ursa-andromeda-avior-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92b9cdb554417f4a121dc2e38d5188925f4ffd5d976110e975aac9951bb27b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143712 Malicious code in iota-bellatrix-husky-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2973f9118f939e46c373ee35b5c10d61a18a3c353d952bce4928a4ce858d4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143274 Malicious code in hercules-ceres-jest-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968504ba2b4fd0f91b0925a1a6f37f0f562d4535dd22ce439ac50ad7e2326765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144160 Malicious code in kaus-vuetify-deneb-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fefb79e2456ee39eaac3f8098f9bab91b03aae22ed83bb9fa8faf7cff8769ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146816 Malicious code in publish-start-mui-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c753e9b5f17f02656f2a537db53ead0d5f94e89644dc3b25a18ad0035a7845b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-xenos-fornax-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36082075eac92799bc35bc96d11c348c8e7c0aab61e9f5a9c5d394fbc5d7821c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139598 Malicious code in ariel-umbra-ophiuchus-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9e86173ff0addab1cdf898e07c3c272dcd04dae661fe37aaf678f79b66f2a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-galaxy-postgres-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e258dc5e9b5fb277fc19f420f2898fcc42e171ed175cd5bb214e6b80bea57e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-gulp-nestjs-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8834abb9c3cfb987d850c0ba81ac464810cb8d694264d1778af4b4e97cdadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145259 Malicious code in mysql-pegasus-lyra-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35707c164ff23efbd67fffdf2b796d89838d08e530f02d8a1a53add5a853e96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139278 Malicious code in aldebaran-gatsby-phoenix-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35784680b56a34e605ce149c9cfb50e108268e0841aa302c3aea60dc7460f7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143092 Malicious code in grus-envconfig-halley-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685e558751be0ff44bf9e4c96d7586de4b6b3509fa5eb90db8718448fe4a02a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141443 Malicious code in dactyl-galaxy-quasar-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86057f9e811638ad1ceaecfbf45565c63cb2d6021f27fd1e67c878f87e002e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144507 Malicious code in loglevel-dorado-cygnus-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20dcbe7930e4780eb2a5484ca95bfe14521c72f890429e81afc68209d96c2ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143250 Malicious code in helmet-deimos-enceladus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6e531a39369437b0527d81e78bfd05af9e42257dbe3cfc838ba5a7f11ebb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146165 Malicious code in phoebe-nightmare-npm-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774a47fdb518927067c69933219ba0bfd8dbf5fb177ea54f167901861846ee65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141782 Malicious code in dotenv-safe-wezen-loop-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfbd1335926adf07b4842df69761df017e389eb233b6ad9b629bb51f25ea4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-eris-halley-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb67b048a0c6e8814eae9316db3934da6078e2a0cd2b8227ba096492e3f4d96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...