MAL-2025-143117 Malicious code in gulp-json-buffer-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5c127955b6f819a7c29832a75f751a7060b856d48eeca69ce552869a8fd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146812 Malicious code in publish-schema-scorpius-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69853a39d7a0295572d26acde7950f2beaf45da49f5298625f19213d97277f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148046 Malicious code in socketio-buffer-version-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517151a6ccede16b7c4c18188be61ff22d3349046b3dfe886953d1350134bc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140673 Malicious code in changelog-library-morgan-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55450bda6649eced55284a2e5cb1d17294f7d951afd2040f864d9af5c7287948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146165 Malicious code in phoebe-nightmare-npm-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774a47fdb518927067c69933219ba0bfd8dbf5fb177ea54f167901861846ee65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143274 Malicious code in hercules-ceres-jest-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968504ba2b4fd0f91b0925a1a6f37f0f562d4535dd22ce439ac50ad7e2326765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-elara-relay-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c55997285779079206d39209f938d28c698c67eebc5704e9a8b02cafa6a34d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-dotenv-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4bc932434479fa4e81f262b0c82cb63b971801af78eff50112834c003780c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-server-jekyll-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae00849917075b7ff0a50029a91669d6550d116557fba279eb8d538fbe4ef6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-quark-antares-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2705edc75fdc673a8224482fad5b553e46f7fcd696e1c16c4557c29c33efa292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140388 Malicious code in capella-got-norma-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378a90563bb59c066009d1f716b8397f7a9794d238c740fa8209ae523f935e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143270 Malicious code in hercules-async-sync-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21f8a0f0f8ee952f1f94ae7f00fe9bfb27f25ebb131b50774004ecec744eb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143053 Malicious code in grunt-astro-geckodriver-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1be0f2bf539ff1222567468e6365afcb79ff15bd5b2b4407cf0121b5d75024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149522 Malicious code in winston-procyon-norma-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a7b8a2c352bbf7bae65cdea75bbfb5e043e5d4200b05dbe0ac09a2a07df52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144291 Malicious code in leda-rollup-mongodb-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8e055ded6c374433931709e21ef5dbbc32dd336f2b829628a9a9e900854e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146229 Malicious code in pino-pretty-antares-wolf-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff6395df5bc3336a6a4d7f56b89b2d327305c12579b282ae41a212ad7b8aa26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141809 Malicious code in duplex-galaxy-postgres-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e258dc5e9b5fb277fc19f420f2898fcc42e171ed175cd5bb214e6b80bea57e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143546 Malicious code in impulse-global-octans-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0994ea4815ebd11f6226078d9a6c346e561085e6173eb701091797e4908a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142018 Malicious code in enceladus-alphard-tool-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc835461937ec8ab9e335744183882bfdb9da209471bb7b831e581a688188008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144580 Malicious code in luna-query-hyperion-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6703642c5e7790979d8f6356a5c1c0a8f05d50e01d7fc6bcf2962a0e0c9b2e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...