MAL-2025-144579 Malicious code in luna-query-hyperion-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6142e23ee5ab164fc5622f93b19756207d75ddf3f601955b5f9f00d999c2c42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141081 Malicious code in convict-pavo-kaus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dedd338de94ab3aca08a7d7afb89baa6958507406e3a7ae194da178bea1971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144983 Malicious code in mini-css-extract-plugin-npm-lint-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955c1cbb9e53ec6a4590e00dadbf57602004d2e8a29573af63c9175795bf5bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145553 Malicious code in node-sass-run-script-chariklo-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5944bf5c3be07d2e392061379523f658d10a122853c5d85cfc015a5a2ee4bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141559 Malicious code in deneb-testcafe-dotenv-safe-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a6f8049199b598ac6a94328e799d71ab971e6ac6641d4f180daf58200cba22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144054 Malicious code in jupiter-europa-test-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e37cc939f7b9dd9e11d6abaf23051989e7581681ed85c1f58e2ad2e96a039d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143550 Malicious code in impulse-pino-eridanus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8168435c54621630cc4dc2b62e83d9bc97325824d39293359dd328c3af275f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139674 Malicious code in auriga-carina-iota-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ebc54a6c4ce6014709deaf1289cf4baafe511737cd62e0fe961e77f25872b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139671 Malicious code in auriga-algol-bootstrap-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68d8995c9c42312c48cd62a77f4d227f3731c914eb2f4a8676d20e2cebcce69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139740 Malicious code in auth0-carpo-npm-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96538ed22e9fff64506efe3185499e55d1ce7e490f55e0a7da4becfb0b9d7921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140926 Malicious code in commitizen-chromedriver-flare-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c39fe3bba442aca2cda6e7c18a2ffa40c87639f81952046f80fbff313e601f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148623 Malicious code in tethys-mira-csv-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92e07edfec104f27c0d5def85f67861f7dd01686a1fd7615be4a2fb1db864c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147568 Malicious code in sadr-nightwatch-version-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b9600d2636bc95e4fb53ee60cb488216bbf604e52ea23b2782587e7ec43f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145250 Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143867 Malicious code in jasmine-supervisor-cordelia-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd1c1ed7f96e66d707625271cc3331e6547e92e384a4d8685bc1827802b0bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144840 Malicious code in meissa-xerxes-ora-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e90b415bc455b48d6e9b02ca3d4997ad6ac8f6a4a2c73c86c9ade270e737c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141578 Malicious code in dependencies-radiant-centaurus-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e778fbe2933bf6f9826f4579b1c2dc91cfb8c2954cb7678f45ed94f6f736e0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146648 Malicious code in promise-rimraf-supervisor-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59479e17cbe88afc81a1c8a65d70256bb17e84aa6391bdafb3acfc2ccd62424d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144123 Malicious code in karma-websockets-kastra-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a2f825d9a99d499cfee3bdc98a762a5ce61eaad687a5bb11c1f762337ea5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142831 Malicious code in gatsby-antares-writable-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26b78aef3942d60119f4eb9ae9dcea573b79c20d31c8aa198ef687ab7d493d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...