MAL-2025-147763 Malicious code in sedna-despina-pyxis-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d399d73429d9ba27cac764fcba3869ce6e10718127ced0ff53bb89d9614c692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139642 Malicious code in atlas-changelog-nebula-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7e2eb2f1733d25f25813a2bb01c686f23d859768bb8ec96a69b2309152b774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140950 Malicious code in commitizen-webdriverio-chalk-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b85bc862396ad81ba207ade4159f76431048b39aae4fd53de1e288f8080bb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144598 Malicious code in lynx-parcel-telesto-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a81e296bc597462543d7c7356b81d22d0bd5ba481700455ce5e90096884655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140347 Malicious code in callisto-quark-electron-builder-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587376d0b5e475cd4ceff4bc0155b8aae1e1739e9a751891f844ee31ffb597db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147140 Malicious code in regulus-atlas-passport-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5c316ba24ee4bf53cfaa8ce2c315076b48305c248711325116375ce2d8cdf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143105 Malicious code in grus-typeorm-koa-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec8ddf276ff22a8a0a69f94799d92ef10703075a6b5070301b7b59216223214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144334 Malicious code in less-loader-terser-umbra-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e0130e99b103ea34fd14f21dae9f7697b1ec917b81b17040f86befcb6a844b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143849 Malicious code in jasmine-dione-antares-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8eb24375a86ddb152593c2601b25c78fb8d04c3eb3a1ff03cf84d53233ccbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144252 Malicious code in lacerta-ursa-process-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108481acf0733a6dcfa4494b50cff9fd397842b2c03148422adf1b8d22d76315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145663 Malicious code in nova-passport-hyperion-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b1717d7f72fcec0841422679aabc0f3e49522afca70aa518e274c8d4479e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141527 Malicious code in delphinus-oberon-resolvers-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643f07dd9d57dab6a0026c421c766bdfaef2aab35236f4b0373b185967b47b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146388 Malicious code in postcss-google-prompts-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e3cebc126d02237fd746fc3461146e32650856c04c1abdad20a0015402fb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141964 Malicious code in element-ui-charon-juno-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc55b9ee51dffe3585c855ea526d5c0021a493b8f3118d417c5da181aa1fd42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143550 Malicious code in impulse-pino-eridanus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8168435c54621630cc4dc2b62e83d9bc97325824d39293359dd328c3af275f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141186 Malicious code in cosmiconfig-meteor-draco-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4172ff3a9ecb3394a2c362a7510ce7874c7fc1f9cb335e665212ae60a9707b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149771 Malicious code in yakutsk-init-neptune-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a512de47dacac8b7e10ad032e5bdb245b16bd64d64ebf701bbd3adf8efbc71c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149735 Malicious code in xml-start-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91eedc1264661a331bb5bda407d0b16cf6ff42036d0c67981b64050be0744e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144929 Malicious code in meteor-readable-norma-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb19a6b6f3257cbf23fa4c3e5f704404b50b398684ae6901bbfae055b308a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146586 Malicious code in procyon-docusaurus-leda-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae77067a79c5e78098947e77b61b6c2682f730052878dde22a77c5e0b34097cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...