MAL-2025-145792 Malicious code in odin-corvus-sirius-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fee67acece68dcfece32a0e3209034a208b1d4e721722fb1a87088b70c3792a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144443 Malicious code in lint-pavo-meissa-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e8b50a01510c3c6be8781d310dad533e91a7fcbfd0957dee87343c3186492f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142237 Malicious code in eslint-plugin-process-sails-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54131fa2d2dcc4b78de6cb5b6d09342e6dc5740aaa9fbbe5e0ec5cac6985a259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149122 Malicious code in venus-sails-betelgeuse-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab7dd16388a93e8047078995ecb25ef16b1db8fece43c462fef99199b710136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145184 Malicious code in morgan-nightwatch-webpack-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cf587f269ecc7f2f66a9d49757f109a9d5f079dc24163522e53da40953e73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140768 Malicious code in chromedriver-elektra-halley-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ec5f701b3069721f2171df71e6cb4b2a89f1cf132bfcb9097a1220f44b1f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143237 Malicious code in helios-odin-start-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db7425d137324f44c522d980f0e97d5761901d2847c2349c5a0b5321bb8f47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143734 Malicious code in iota-nightmare-sqlite-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ec0d84f8b659ba46ca42b475c6afd13b29eb92b96344233119c57a898822f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149715 Malicious code in xerxes-public-eslint-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2d15fdd3e3f0c5477368f312b0532431a264e618e809ebbdf7474e454016b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140508 Malicious code in celeste-hexo-auth-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d92c21a1b1e16f7cee7c32f463513296b72f874f3dc1d5be0b833a8f10432a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147981 Malicious code in sirius-transport-barnard-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f16b41c916fd05bc457611fe0cddd995304c32516ab4e4973479b1f96166143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145494 Malicious code in nightwatch-ursa-triton-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2fe6abaf7b95539a87fa51af803b1e73749edcbcf422918007d6ca8e2ff864a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142804 Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149899 Malicious code in zephyr-yildun-docusaurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400b1598db4b5a863e70c4e4eb420101eaa2ffc4863cbfa4bc809a637b75f3e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144225 Malicious code in kronos-sagitta-zenith-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af17388eeeb9c27ab19d91c1e43ff05fa1df5fa0feb3b0b941a1e1e2a5b153d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148876 Malicious code in uglify-js-nuxtjs-karma-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a66eca8cde6088bdf27e856c1034c60a3cd001c11c8f07bcc814afb5fc46e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143840 Malicious code in janus-webdriver-manager-promise-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1d8c34aca7485379061d221d2cf2eb91ed7e807af9137a758ed65d979477a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141560 Malicious code in deneb-ultra-process-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf421c8337829ccd7752197bb60c5b21fc674b453bfedc4a03db7644b960f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142407 Malicious code in farout-delphinus-wasat-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d8eb4fd157d99907ee9c9382a68a664a9abec27f6b53a1e2a784d51166e7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142423 Malicious code in farout-repository-deneb-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12a3a3f541522dac8d16f4a3a5823d0f5cc7e2eb54a84dcd8b8abfd9f3a84ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...