MAL-2025-148317 Malicious code in stream-ganymede-semantic-ui-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d2d21c2aba42884dc74a9306d2b5780925eac3e6e9fbc5db65bb2e22d780c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139598 Malicious code in ariel-umbra-ophiuchus-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9e86173ff0addab1cdf898e07c3c272dcd04dae661fe37aaf678f79b66f2a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-eris-halley-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb67b048a0c6e8814eae9316db3934da6078e2a0cd2b8227ba096492e3f4d96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-bellatrix-orbit-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beed952ff5c447276e9850d9f01f562419a7b51dff21a62f1a8668d20d516965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-pulsar-child-process-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf5acc9aeb09f39172e1ddf5a42d3c2acc0f8f2bb42d69a683d266971cf6452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-csrf-ignite-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfd3b91a49b333d4e3b551e825ad73ebabb48af5696ee496404e652d6a1ee9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148587 Malicious code in test-winston-eleventy-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3789da716c8a1be224410add54eccc97e3ad9bb5561c3a3d9326e119826c914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140409 Malicious code in carina-eslint-plugin-async-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c48ce8ba7d435958b6830b6a8a7fe21a24780cd82d392645324548f91b988f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142631 Malicious code in fornax-loglevel-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4564c10a88dbb40742a117cd51e90da16d563a33c2464c01b686df5490cb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143250 Malicious code in helmet-deimos-enceladus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6e531a39369437b0527d81e78bfd05af9e42257dbe3cfc838ba5a7f11ebb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144291 Malicious code in leda-rollup-mongodb-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8e055ded6c374433931709e21ef5dbbc32dd336f2b829628a9a9e900854e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149522 Malicious code in winston-procyon-norma-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a7b8a2c352bbf7bae65cdea75bbfb5e043e5d4200b05dbe0ac09a2a07df52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148586 Malicious code in test-umbriel-postcss-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653aca1f1686de272649e61e1bde312c3bf99f0ef8ab440834e77b4c521883a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145259 Malicious code in mysql-pegasus-lyra-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35707c164ff23efbd67fffdf2b796d89838d08e530f02d8a1a53add5a853e96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147777 Malicious code in sedna-mongoose-mdx-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685c7f1a1ccbaf9d2854a73087c26e670062432dfb5c8300287384444aca577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148046 Malicious code in socketio-buffer-version-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517151a6ccede16b7c4c18188be61ff22d3349046b3dfe886953d1350134bc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149184 Malicious code in vortex-loglevel-deimos-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a15bdf3c8662d095749c92ca6e42d874ed013fb01d41651bb4bba8068a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146816 Malicious code in publish-start-mui-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c753e9b5f17f02656f2a537db53ead0d5f94e89644dc3b25a18ad0035a7845b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144160 Malicious code in kaus-vuetify-deneb-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fefb79e2456ee39eaac3f8098f9bab91b03aae22ed83bb9fa8faf7cff8769ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143274 Malicious code in hercules-ceres-jest-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968504ba2b4fd0f91b0925a1a6f37f0f562d4535dd22ce439ac50ad7e2326765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...