MAL-2025-139448 Malicious code in antares-wezen-octans-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7134778e0aba5cfe37ee12afacea92571f5f0fdaffaad402a05daecca4e96d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148126 Malicious code in spectron-webdriver-betelgeuse-odin-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08851659b6a53ea323142e60510fd2ea2215b5c6a75a5928f0eaa11a6e6e9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147168 Malicious code in rehype-eris-algol-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa52e77988c744b88131fd41aa547759e2c6ce9957fddcc2632329184357735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147180 Malicious code in rehype-procyon-tethys-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad506c5fa209f17fb6c2d1c69360e696d326b007be2923e5570d9e7913a54fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147858 Malicious code in semantic-ui-tool-fornax-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc452a16821f632b60df56036af5151063884ee1b108f2aa9dafd78573f9d437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-helmet-vuepress-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca2a0f227ecf5dbd238bdb4fdf614d28c9f11da0fb859e447e77910ac1e113f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-antares-google-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204408f6254a7b497b0c72adb8496ab013f648f046eb3bf4427efeeaae9de8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146398 Malicious code in postcss-loader-luna-eslint-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e339b954ad1c5820bcd5e07e8b57037f08a5208d8bb38e2159a7c89fd9ba3735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145202 Malicious code in mui-enif-octans-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35d0a5b9ffc2decde1b6cc5b23bf7b0c2c7016a282c07204a34fd5864eb48c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139641 Malicious code in atlas-callback-xenos-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa94b81da2f4a6f4e376f64baa173570ef405d5befe2d774868143eacb0c594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142974 Malicious code in got-antares-jest-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1574c432ca6f79ac02267947c03993a142d4617d78594c0ad0cdcee8f052011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144065 Malicious code in jupiter-tailwindcss-unuk-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6604a27476f8c7705bc350f742b566022ef6f23c269b2a748a8f7204e54f0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146109 Malicious code in perseus-quark-arcturus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f657b0a6018bdd1bfdeef1e46d6a6e7daa9470bd4549627d647c52014c97745b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148598 Malicious code in testcafe-kinetic-meteor-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656c9560ccd17e180daf4aa2254dc60f3255420737a36176c05728b8fdec1786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141392 Malicious code in cypress-apollo-geckodriver-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced988c87086bc25394561fb8f6677821555c9897661d3f388d6bdc649bf4325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144449 Malicious code in lint-staged-commitlint-global-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b77175b845c66db53476f7ce9d03f92d733e55c29c84ccab5770fe6f45bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145374 Malicious code in neptune-playwright-spinner-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30008cb9e1f21683b9946f38ffa4bc9468b704c557c9bb1f67f7f9ad448b2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144817 Malicious code in meissa-mui-webdriver-manager-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ca53b60899d6fb633104b2dcf5537bc67fa0803d7a9839f95ee0a928f9eaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139932 Malicious code in bellatrix-cosmos-pulsar-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d5121b16540457738a85a3847605438e554246e5eb1c5f9b09f1a9ed821287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142234 Malicious code in eslint-plugin-nightwatch-javascript-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b333ff43ee1f9be398cf888d133ef6f16c4abeb587460d88c4ae7d5a8173469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...