MAL-2025-148678 Malicious code in titan-fomalhaut-node-config-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490bf6813567ac10a53b55d8076e06b00264ecb8cb1e85e276c8576f7508bc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147206 Malicious code in relay-nodejs-gulp-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9ce85998f19be660fd01a665097cfc83355d9d6c8b14b3f39487793e5dfb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139428 Malicious code in antares-pavo-sagitta-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb91c966e9c686f36a11e9fc5d3120d55ab7e432bfe20b1f89bf8a88a5c7fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-apollo-meteor-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954e6dd2917703b268c5246a18f67420778d3f628eaef1247fc2e40d7c5ebf0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141606 Malicious code in despina-publish-dynamo-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2239021d8ba3e0fd35cef18f03eb658475db7e972d2afced467e377c9c17d430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141628 Malicious code in development-query-pm2-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00b132f0a55368d12101518326d44169793bbcf76cc7aeb0bd83264f0b0fb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148885 Malicious code in uglify-js-upgrade-scorpius-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a619ce4025267f0cd25ec403515e25fd7c994673f76fb3a0cbac6469abc6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145838 Malicious code in ophiuchus-radiant-prompts-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc515149db990a33e961c190e3feee1a52fd9630a5fb061e4dfc2df06dd82b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147295 Malicious code in request-hyperion-gridsome-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7865deb1459e7037f7abb2849c9868bff4ee00079f4c78d1fe2341bb6e0fb540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140566 Malicious code in ceres-geckodriver-hercules-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb881aa6de9f82d8b55c5c71440a1ab89edcf769011da63aebdbb2264e40ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-betelgeuse-schema-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670781bb419cc79d768c880aa8e00d75fa01c072444a62cd33ffcc1cadb81d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd914900fc67827f00e07c2f5c5fcde3d709bb90a7146f51700c73d01e22125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-cli-quasar-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fab84b007bf18d2be53f34e9459eef3ed9c6f3df11ecedfddf8cb18bb4da19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-semantic-ui-iota-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522661629c144c726922f88e7442ab71fcbffc91daa5a123695bf5248c25ebed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-vortex-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f82c6172c917e1fe89c1b3de08f1f7b8fb7a88d57cd33429fa4cb05c4baf99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144522 Malicious code in loglevel-testcafe-kinetic-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b35b09e0a0d18b36c54fbc73754302779000e4a4c2f94804e5e040b67669a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145166 Malicious code in mongoose-ursa-csrf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff09a0e2775c3f104292df18673f57ff3a4052c29debe9466012a0994d4cbbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139353 Malicious code in altair-husky-elektra-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397657c1f4752fc427c5c228a55cf0cbc4e0269830af8d4e9335b2378ad9d4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146990 Malicious code in quito-betelgeuse-ursa-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d12f9bb05b4af8c30ac4689719f757f75fa39a781e52d2bb98ad133ace0e3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147977 Malicious code in sirius-sedna-sass-loader-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0424ecff4b8401ec52079df0e74a63b387aa5a0c62be3599366ce04f1b57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...