MAL-2025-140872 Malicious code in comet-cors-procyon-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a2a89b119108ed4e870e27de544670e728a8d329e9e73ee1f8bbd76d6dc821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148229 Malicious code in sqlite-iota-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344171a165d0c3e2a68c971568f883679677b8f5082569c0d17202313d2518d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147118 Malicious code in redis-webdriverio-radiant-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897a7e6b0d29673d0a35368dd757e92f753b005c3adffa0fa191ef74cbe7ff03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147908 Malicious code in shelljs-ariel-ophiuchus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693053840c257ad600fff44f093b29ccfea20e6067e1597aaf6f8e47ebdb03ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144826 Malicious code in meissa-pm2-middleware-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545972211a2bc326cdd56d631b2c8d1331eb9494e29039e8cdcdc3e098441ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144435 Malicious code in lint-dione-publish-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff882e7626745936fd70d55ac96b8390b9cd80e97eff19f2a3bb2a37cf345a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139270 Malicious code in aldebaran-celeste-fusion-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d449687758ea4d1616ccba7f7691ab128718236e5a1964552aa9a1764a7dca3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144022 Malicious code in juno-comet-meissa-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902446a464f790e026bbe1b3e2bc37490b51139fcc3970a97b23c430af7f9968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143061 Malicious code in grunt-element-ui-sqlite-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e5be9b47f6694968a9eac77b11714a83793a8bb7e1fe43a9dea6c317f0e651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141805 Malicious code in duplex-config-capella-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02bc3281086614c8cd6b45aa58e9e18acba38bf7938917b5b04ec3f943b11f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141320 Malicious code in css-minimizer-webpack-plugin-babel-shelljs-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4845b9a3bc9b0f42f3b7cd20d841b772cf37a58a4b4cd85d760de5154291b3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148285 Malicious code in stop-aldebaran-sedna-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a1fe9878670df93aeeee8558080834f4d1995474c5ec713b4b52e1e76c27c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141993 Malicious code in eleventy-csv-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef3bc58089df1fd8c787fa0c6b3f40c2656d4f1cf48409ae9581d82d97c9558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143652 Malicious code in inquirer-nextjs-galaxy-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bcdd082ce996def33fdd212572b9582cbc25f6717782a182c5688ad39d01c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145459 Malicious code in nightwatch-chai-query-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963a62b6c50739741793c0b2b892aad88790e997e79f5496650f89e5a6651a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147685 Malicious code in sass-loader-xml-altair-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602f04ec56ac19f9194b5ede251f2d95df2f758e975cc2eb78ff7be59af51050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142887 Malicious code in geckodriver-upgrade-upgrade-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7eb7f5199d42872864bccb85bed6da5647e35478b981e790fc8cdea403f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148624 Malicious code in tethys-mongodb-orbit-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8205abea7e11d1c740f134019ee61eb9cf962418ad662c7ac652238e7618d368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148978 Malicious code in unuk-deneb-meteor-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e62a13a5b39e25f133df3651b97fa199b321ebd98fe93315d681ddc4482580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139739 Malicious code in auth0-betelgeuse-phoebe-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954a27b30c79b494f8bac523fb12cfefbcc5d58ba134a3f342680d5e53619d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...