MAL-2025-146109 Malicious code in perseus-quark-arcturus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f657b0a6018bdd1bfdeef1e46d6a6e7daa9470bd4549627d647c52014c97745b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145202 Malicious code in mui-enif-octans-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35d0a5b9ffc2decde1b6cc5b23bf7b0c2c7016a282c07204a34fd5864eb48c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140680 Malicious code in changelog-query-adonis-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505950e51b56d621a77add998a0876538ff548e95b7af30b6c58c1158b1a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142234 Malicious code in eslint-plugin-nightwatch-javascript-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b333ff43ee1f9be398cf888d133ef6f16c4abeb587460d88c4ae7d5a8173469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140193 Malicious code in build-terser-chariklo-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed23b79eed8301d5dd64081b506129fa0dd8086dedc7df9b4ba9d963e3bae94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139203 Malicious code in achernar-rimraf-neptune-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2873abeacb96182a10f8b8ce2619dfc56fe2abc8837619a5b1d6d628223430c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146136 Malicious code in phenomic-json-nodejs-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e01dead8d8853b5795ad6a7c6064b9c62e43df2d92bce5cd0c4644461caa69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146398 Malicious code in postcss-loader-luna-eslint-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e339b954ad1c5820bcd5e07e8b57037f08a5208d8bb38e2159a7c89fd9ba3735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149790 Malicious code in yaml-gatsby-yildun-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9176cc856a7e1b77aae4968733ab2bea8d8ddf71d2233a9e6f1ef1c0f9e0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148211 Malicious code in spinner-tailwindcss-sqlite-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad336a787df0feade095708c35cc19985da02e0ca85730947baacf7b25f7ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-karma-rocket-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0526c1876e6ca917c406bd85bd5f010372f899172a5af0441719f3554760a9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-inquirer-astro-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ffcbe48d8e1d6ed0e95d7e609992f48ef97bd31136729a5141f9a3fb4c0424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-spectron-csv-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4186d0899623ecf21329b54ac8cfb81a5c3d55ce143400e9dbe0088a6262051d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-betelgeuse-toml-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2853f1e0cb19851812839610ae7bf708341ec62a217a1006c8db7e958a9ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-oauth-ariel-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1475c669a38ca0f0cebf7c8a172f9d05e4b1b9b909012c8a62416ebae573e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-pulsar-sadr-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6beda36d4c0266c1651e7f0b36b409a3b3136c7728447a6ddd5d69b184eed849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-pavo-mocha-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f613be6a51ea941638b5a12837877d984872eb3b1f8b708a07c955192e00c566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148126 Malicious code in spectron-webdriver-betelgeuse-odin-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08851659b6a53ea323142e60510fd2ea2215b5c6a75a5928f0eaa11a6e6e9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143894 Malicious code in javascript-umbriel-kronos-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00f1ebe329c4b4ab18fc494517cb4ec5ee2e7059ff770fd9aa2d251d5b5c0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144449 Malicious code in lint-staged-commitlint-global-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b77175b845c66db53476f7ce9d03f92d733e55c29c84ccab5770fe6f45bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...