MAL-2025-143240 Malicious code in helios-quito-chai-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98afb88dc9b089218583ab017deaeef6d3a9daa28b51136783fe9a8fda4142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146786 Malicious code in publish-halley-antares-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39df4aee8d6febe3dd5170aa15617a2930747bc89bdffb22ce7e77513694c593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145339 Malicious code in nebula-dactyl-meissa-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fadf6c26d618a6dc56352d25d762925947927db5f5ea0134c63e3dbdf0bb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139899 Malicious code in backend-yildun-fornax-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a40d1de5b24dbb448475870ce97fffe04c4ed911b649262851e279fd42ab9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148569 Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a458dc1ac56e93a769b5ee12b7dfce2a272d1d772247ce5792ae25d97b27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147109 Malicious code in redis-magellan-hexo-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d306ee87ba5effd1c09c4499374cc41c683e9287de16007dbd8653665a3c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146877 Malicious code in pyxis-halley-hugo-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e73ab5d5ad505774fa0888b694599b0d611ee8e2dc23dd1b9ad596d3310810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149451 Malicious code in wezen-airbnb-query-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb050d689baaca98bb1d6ea4a76f49373ce16319060532410879d90b9fee0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149418 Malicious code in websockets-cluster-puppeteer-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ceaad475d9d955f6b6f6dbade90cab89f4baf78f94279c6647fce157b11494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141248 Malicious code in cressida-xanadu-delphinus-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce970d7707c6bb12f8768ed4836703c39d4aa3cbb4a0df0c586ec0d15d37b23b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146950 Malicious code in quasar-geckodriver-got-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f1df05da16c6960d3d2977c6fcabd9d256fd3297e8205bfca97b625c6a24f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142059 Malicious code in enif-quito-spectron-webdriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ab05c0abe59e44166b054374c43449336ba83fe938e39d8214b4c678b52ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144159 Malicious code in kaus-venus-hydra-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5a4b8662afa788e2b7590addd7547d4b4c9ab080c339307c8dd4bc30208c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143621 Malicious code in init-gemini-cassini-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4652bdae27a6d1c8556e49240b029156bee9a2651e9b9630008d24f065f9d224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147092 Malicious code in readable-sqlite-lint-staged-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e86395f72b0d1c4ca3d9c82e00d107b76b89cc287e27a646f1d01fa40c79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140819 Malicious code in cluster-auth0-json-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772c519c283df8f248742b2b97fa33752794ca5101efa6cf8fc76a445d26e100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146298 Malicious code in pm2-grus-castor-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b01596d797dab056c781ca726c1f03fc07bec0ea69821410f74259d0a63bcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142187 Malicious code in eslint-antd-babel-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc0b97c319bc0fab324346fa6235b482369da554c688d9c1557de6fd77eabf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142127 Malicious code in equinox-miranda-achernar-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c8de5522a4e10c92463701c201ae813abede03a36430c363f3d3a3e580f9db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145383 Malicious code in neptune-test-jest-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad12d88a9ef4fa5d1ba411a5bbf157a43c53931bf1c5eca24e0a51a56eb7b65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...