MAL-2025-140088 Malicious code in bootes-postgres-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87297a5860fcee5829f7e212c41486ad5a4a23f21ca3ba580b5af5d2b4bc41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148026 Malicious code in soap-loop-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66b23fbc8d76abc565f6000d54112e22f65b8e5b2b82039d916415cff79e258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142808 Malicious code in ganymede-luna-solis-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bba943fa330cdb3d3878a5ffc09d78a6df573ce8fa64f6f6e36f25fcdd1d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146881 Malicious code in pyxis-kinetic-hapi-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba961f4b13aeb2e27e4d621d21841974bab64acd975b6f56d1165d1648b1178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143754 Malicious code in izar-corvus-babel-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770838708355f690eb1ad96419209ef3c6b86594e8fb63af218e0f9fb75277fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140798 Malicious code in cli-geckodriver-aether-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18846f63f307e6c3bd0ab988ed29bd9c00e3411f32d9b783a0b8feafd51e01bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147495 Malicious code in rollup-eclipse-equinox-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d12da5b6ec2aea61ffdd55200ca99828c12b9cf613f2732780c089bff606e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141458 Malicious code in dactyl-webpack-loopback-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1b72b113f1eb154c1f62e42afa4cfbf203d67582c7f78aee71fcc624891b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147215 Malicious code in relay-zenobia-webdriver-mocha-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73afecd50bb21b7928b5f8587d1351cbd5098add2bfb6907d1b41a98d919828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-telesto-configstore-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54779bbcb4eec02fabbaa36234e8bc29bb9dcc9fb6945cc112b983d94e6650c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145384 Malicious code in neptune-umbriel-subscription-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458fb1c9c88b8657ff067fec28494d60546f71a745a4f0004bde4c4ed685d14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148698 Malicious code in titan-winston-commitlint-config-angular-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129fb702d4c17a8cadb39c9c2e95434509dad7fe2d7c1502a86ce3a8386bc6ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-luna-writable-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6400b0aa8e5a72fa1f6e1bf567ff13816518f809ec298c81675edce4e202d804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148808 Malicious code in triton-build-cli-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1914c9e4e7618352f9b54c4f7f471567662ee798d1e82657b53a4cee766b703b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143886 Malicious code in javascript-pipe-docusaurus-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe24f071b8345b4565c3d327bb46b81da8836d9ef89d16fe70049e65458960e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144221 Malicious code in kronos-grus-scripts-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f99b9a7468f04a7afd8f06f5a0badcfae4fedd17f6c6995f43b1ed54c14f497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-arcturus-rocket-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6fb61adc850fdd19f68526676fd00186f6fb9efffd1d06c0d66ab15eaadae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-lint-toml-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f154561b1e2ab5853761f1ac96534b4e5e5ec7bf8e7e8fe50bdc44f46703bde2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-relay-nashira-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431b7e15efb9c3f0cf9e13dc4183e0b68c73965cdcf71243a54a558c44da98c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-vega-electron-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040d240576965aed13ed11371c55ee7e2365e2d115a89b45043d3337d7d15156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...