MAL-2025-145290 Malicious code in native-magellan-despina-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff95a0f9f9d0bf145c3d00b8c179869268bb7ca8b7df9aefc3d9004bb7b7465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146537 Malicious code in private-ora-react-bootstrap-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f70d86f10e498a68c8467eb0549e813ea9e7d89fa7faabb6bde280ca072604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145285 Malicious code in native-backend-dotenv-safe-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781f6d6927036e8ba7935aa91fcf468079fe5edef66c51944922fd9b13d986e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146531 Malicious code in private-eris-express-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733ecda5e2516de20ce076f444c88152fd2870e9e779df984d3a8cd9301b5fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148655 Malicious code in thuban-link-bootstrap-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733981bb19ff12b4cfcabe59bf6a8a94808fb30163e1dc15d296f1c523f55cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148652 Malicious code in thuban-gemini-warp-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053181b6ef8d4f7582c97fb9eedaae20888f1ba3d215dbe01398d3b7c6460911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149495 Malicious code in winston-got-sagitta-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82463284e6d68558aa7d4c54fff9d4a660f92325d94010f8983fa28b8bed191b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146969 Malicious code in query-jabbah-eslint-config-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de71c82e1a2e4a20ad80dc25e5b6c01e7bca0ba551494093bf4cfb589232eb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141670 Malicious code in docusaurus-lyra-ganymede-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0eea79486e0ada48de0b1c4725370f54af12d5621874cdacacc2cc14e24fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143515 Malicious code in ignite-izar-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0894c7a3eb9e5f3c158e630bc71fbdb660de946d7d0a92955c82af30adb08ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140337 Malicious code in callisto-jwt-fomalhaut-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d4edd29a5213c358777f85632ba1fcf13f6e4e6bbdbeed1c260ff2b3425120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148363 Malicious code in subscription-non-blocking-auth0-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e18466e63e0b1466c9156c1ac987a1c7a353065e6e08d5f6cf3cbb83eacee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141299 Malicious code in csrf-winston-koa-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f85b9854a02f42fca44b893a5888ad42de58c0c48b4f4c21de2c867fe7a5bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-writable-spectron-webdriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755591c551de8c2c5232708dbb1a9adef2f6add41727bc872a1cfe2b72206ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-mocha-lynx-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f527d979b805966a29c97a0f6ba24c8df77bbdf6e19633f45420bca5790374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-airbnb-remark-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300e1c61b12b3d1767ab9e42820d1f4b77d4cbb95072146fa11f5d53d1d5e4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-lynx-pipe-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0162a2d2a68d0f59d54a1dd129db98281cea0bbd3ce97be9d571834ede434b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-optimize-css-assets-webpack-plugin-graphql-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff01dc55623537b68abbf03d914cc855fc9b0ae244eab70204a734b075f8da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-adonis-callisto-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c86b777e7b69686863ef14110bef4d129fd9013113a9688fb043f551c76f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...