MAL-2025-141102 Malicious code in cordelia-meteor-figures-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2f31812e41d80802d25f048b20a70c312ee134f0351b57c00e9e1987bdf010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144756 Malicious code in materialize-spinner-superagent-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c569a14bb5035377c221313c418b1c79724b1e26641bc2a9027efc4adbde6eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148672 Malicious code in titan-buffer-sagitta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd25da2ea12c17bfcc8b82c1f080529ed705b80141907868b255187769fd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143581 Malicious code in ini-apex-ursa-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db345a3df99f8640bcf7211fc77cc9d6d6a65310f8165ea42480bd60fdd7f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144822 Malicious code in meissa-passport-nightwatch-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bfdbeaa33d509303893aa88ba142a86d0c594efb237776d47613f604bb0d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146005 Malicious code in pavo-pino-pretty-chariklo-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad8694ae5e9e2fb525de2a361d94caf1cc4b51939e350ba2974d62c71dff68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148273 Malicious code in start-jest-umbra-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a714daaf767bc9fef0910ad4c37405fcbc88ae14e3ddc1bcb4bb91c35ab41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139546 Malicious code in aquarius-rocket-vuepress-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92eb8e6b2794182f84ca60ac2dd4533e6e10d51086559a89fad109487b8f4d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141024 Malicious code in config-ganymede-hugo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972c4937b0a1a11715489b02260c4d19fd928a94e7a408ded4575366da6e0fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140193 Malicious code in build-terser-chariklo-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed23b79eed8301d5dd64081b506129fa0dd8086dedc7df9b4ba9d963e3bae94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139923 Malicious code in bellatrix-antares-halley-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7459668e9fdfe7e25259ab0a5378deeef5aab39f018a73af01ee396aa5f1f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147743 Malicious code in scripts-prompts-umbra-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba22ce91ec22f2e93dc7bbe56182d55412ebd2d3f58283ca919fa625c80e26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140396 Malicious code in capella-rocket-io-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc3c5393b7fed0671dbe77da2928e386acbcc6663d85e74b8de4a915d0a5dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139219 Malicious code in adonis-virgo-cordelia-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e07b7ec5a3ebdcdcfced2c14aa60be59406831219a126661a9b616532b03b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143182 Malicious code in hapi-dynamo-janus-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77ec975125b6a288a6fd1ecc2cf29882839c1001107382b5ea3e6cb491ef263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148270 Malicious code in start-fornax-cosmos-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17faf8d360e6c0bbb43bfec05c64b4a0c07b45a477bdb0877c1fc4560e6650d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141392 Malicious code in cypress-apollo-geckodriver-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced988c87086bc25394561fb8f6677821555c9897661d3f388d6bdc649bf4325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144449 Malicious code in lint-staged-commitlint-global-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b77175b845c66db53476f7ce9d03f92d733e55c29c84ccab5770fe6f45bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145374 Malicious code in neptune-playwright-spinner-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30008cb9e1f21683b9946f38ffa4bc9468b704c557c9bb1f67f7f9ad448b2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144817 Malicious code in meissa-mui-webdriver-manager-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ca53b60899d6fb633104b2dcf5537bc67fa0803d7a9839f95ee0a928f9eaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...