MAL-2025-147568 Malicious code in sadr-nightwatch-version-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b9600d2636bc95e4fb53ee60cb488216bbf604e52ea23b2782587e7ec43f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145250 Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143867 Malicious code in jasmine-supervisor-cordelia-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd1c1ed7f96e66d707625271cc3331e6547e92e384a4d8685bc1827802b0bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144840 Malicious code in meissa-xerxes-ora-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e90b415bc455b48d6e9b02ca3d4997ad6ac8f6a4a2c73c86c9ade270e737c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144123 Malicious code in karma-websockets-kastra-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a2f825d9a99d499cfee3bdc98a762a5ce61eaad687a5bb11c1f762337ea5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142831 Malicious code in gatsby-antares-writable-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26b78aef3942d60119f4eb9ae9dcea573b79c20d31c8aa198ef687ab7d493d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149487 Malicious code in winston-dactyl-figures-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a6cdbfe14a015e68b53836ca42b5a956f3b9133e9f6f9fe21da036ae347c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140843 Malicious code in colors-cors-slidev-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7b7d21c5d587f3e9a9bb72b1347fd39d95b97c318ed5cf5b7303f5a8c3f880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140421 Malicious code in carina-postcss-auriga-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f7eb49ca9a8f5960086bc7093a2e8660219468302235c18df46dce850a980e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146849 Malicious code in pulsar-zenobia-sirius-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f5376b0c0e0a0ff01dd8e01c3bab10543dba3f4dce47a2a2aa1524795a648b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143206 Malicious code in heka-jsonp-triton-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4442839a576bde6f5711839aebc86fbf239039a98fb50a343307fadc3dcc0e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142705 Malicious code in frontend-jekyll-commitizen-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e3259b503d88674f19a0c0a8474a3cf39ac6c21ea4606c82ba85b144e55d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140597 Malicious code in chai-luna-sagitta-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d3255a82c5c62dbbb9e1dd96ea178fc57f21d2fd80e8dd64ebf605eda0f22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146010 Malicious code in pavo-subscription-hyperion-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab658b5d1b09c534e627e2c84470d76e524048050405bfcca968ad892688e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143118 Malicious code in gulp-mensa-izar-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75fb3ccefc8bcbdcfb2e4436dd2f9ac85c0abd3f44fc280455f24a5c155ef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142009 Malicious code in eleventy-nodejs-luna-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1486a66135cac5985712266daa0e8bfb7dfb03a6066e19fe907090c033b4000b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140134 Malicious code in browserify-mongodb-eslint-config-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626993bea82b77bd813c972a1d32f6381661257bd59fc76b4260c694cf58ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146750 Malicious code in proxima-xenon-transport-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac03473d0e7c277a3d33bf7dcd43e27b5b39c95f6d5058be428204699ee55e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142750 Malicious code in fusion-xerxes-comet-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf07766d12753bced2182938a506ecdf512d8e1d4fb358d5195008a425611e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147763 Malicious code in sedna-despina-pyxis-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d399d73429d9ba27cac764fcba3869ce6e10718127ced0ff53bb89d9614c692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...