MAL-2025-145268 Malicious code in nashira-betelgeuse-server-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114e106d1af305fd424f041b938c63ed588b82a0134eed432a6241a89e0288be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145256 Malicious code in mysql-nodejs-callisto-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d4b3c48e3954d039f5750564c51a3770ddb40213511ea03f125880717cdeed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144749 Malicious code in materialize-polaris-gatsby-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b887a5fc89ada71a9d049c24c19e61cd6becd23fbfd0974d2bb116ffb64734d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143847 Malicious code in jasmine-bunyan-hydra-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562c5bdccf2f66b6c5ea71416bdc7a627f6cf8e331b72ecaecb4431ca64cdf7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140871 Malicious code in comet-config-pyxis-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33044e97e3977cc09085f4cd26c4dd79e15812db77ae419ce12855b010a0d7c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145105 Malicious code in module-grunt-async-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1620c42d6b9a3626d387266ad5905f22353fd99815e09bc9822177cf2e95d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140932 Malicious code in commitizen-hyperion-passport-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ae678ae08345a4d7d7ab5562656176892d798325e14613abaaa1ccfd761396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139435 Malicious code in antares-restart-oauth-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f215c560af1a4a5acd9aa3e2a2551f566aa20dd37dc969e594fe888df260b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148657 Malicious code in thuban-neptune-hexo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b69242a0d3a551a4ece24470a94fa434599d54aac33ce7b8b2a54ea05645c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-eslint-config-native-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d6b5886a28c6841a9f6c2d09635f65b9369f4b371b1122af40f7ec37d1940d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146379 Malicious code in postcss-atlas-graphql-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e1e09c839e7a8dd1bf2271918dfd6f0dffef915db2fca18e17edd957e22026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144579 Malicious code in luna-query-hyperion-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6142e23ee5ab164fc5622f93b19756207d75ddf3f601955b5f9f00d999c2c42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143721 Malicious code in iota-dotenv-safe-webdriver-mocha-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d7e968a0295c0187fef5d43373097ab9585a396b4ff347bbfdd5347a05b365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147133 Malicious code in registry-rollup-vortex-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 879d4bebf6a8e3dcc6d1eecab6d437474700c1c4af14a5b05bd75267fbcd6146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148930 Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3a485ba71bf8141e3c611d37b28d38f948007f335340e0dd9e887ec7be1298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146586 Malicious code in procyon-docusaurus-leda-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae77067a79c5e78098947e77b61b6c2682f730052878dde22a77c5e0b34097cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141135 Malicious code in cors-schema-nightwatch-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3068afe7dca873227fe3f04e64f38db980de42d0e7cc3bfc9bd80c41ccff06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145643 Malicious code in norma-html-webpack-plugin-version-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84509b5d35b1df7faaa56be4c99f921048932e5586fbdebf4d72f7c87eb39467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145831 Malicious code in ophiuchus-ophiuchus-hydra-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47788e2971989ebfda1e3e06af9e81bcdc202bc958dd8727b5529b76fd1c5c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142059 Malicious code in enif-quito-spectron-webdriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ab05c0abe59e44166b054374c43449336ba83fe938e39d8214b4c678b52ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...