MAL-2025-145105 Malicious code in module-grunt-async-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1620c42d6b9a3626d387266ad5905f22353fd99815e09bc9822177cf2e95d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146984 Malicious code in query-webdriver-mocha-version-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3669afbf55ee3aa1d38f6388b3a66bdcf3ef82d8c1533706c7ce365b968efff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140932 Malicious code in commitizen-hyperion-passport-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ae678ae08345a4d7d7ab5562656176892d798325e14613abaaa1ccfd761396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139435 Malicious code in antares-restart-oauth-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f215c560af1a4a5acd9aa3e2a2551f566aa20dd37dc969e594fe888df260b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148657 Malicious code in thuban-neptune-hexo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b69242a0d3a551a4ece24470a94fa434599d54aac33ce7b8b2a54ea05645c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143917 Malicious code in jest-airbnb-remark-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300e1c61b12b3d1767ab9e42820d1f4b77d4cbb95072146fa11f5d53d1d5e4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144701 Malicious code in markdown-pdf-ora-despina-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a575f4f0b31402aad3a9359cc6ccbee516874d462e15dfba45ffd8d8e186130e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142562 Malicious code in forever-await-despina-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad594bf67a4452e66ab3a9c84a402cce3949517c17403eeb0fe086d90559c21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139674 Malicious code in auriga-carina-iota-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ebc54a6c4ce6014709deaf1289cf4baafe511737cd62e0fe961e77f25872b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144584 Malicious code in luna-start-prettier-stylelint-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36b0e4f7b57545761987514b8adc6f3738abe536c5fc6500cc9826bb2af1d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143105 Malicious code in grus-typeorm-koa-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec8ddf276ff22a8a0a69f94799d92ef10703075a6b5070301b7b59216223214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139208 Malicious code in adonis-astro-phoenix-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7e99fb4afc14e990840dc9e2341543154aa3e7af41df224312dc7a2bbf330e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149892 Malicious code in zephyr-npm-farout-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1ada7f740daf4ec82a6105cd6b46ced4f8385c45a41d911c90df80cba58d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140456 Malicious code in cassini-antares-zenobia-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae175ab6d944e9cf9204c7d27941811023acf0a0b69313e5511b013600b7cb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139281 Malicious code in aldebaran-heka-prompts-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a9d30a248a0ce5bc126e8ea78788d311583bf80be7d9efdd06c8fb196c500d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141248 Malicious code in cressida-xanadu-delphinus-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce970d7707c6bb12f8768ed4836703c39d4aa3cbb4a0df0c586ec0d15d37b23b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140819 Malicious code in cluster-auth0-json-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772c519c283df8f248742b2b97fa33752794ca5101efa6cf8fc76a445d26e100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141215 Malicious code in cosmos-proxima-luna-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faad48fe24aff5b595f76158df0c58875bb03b30f753cef677da3adff72fc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139740 Malicious code in auth0-carpo-npm-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96538ed22e9fff64506efe3185499e55d1ce7e490f55e0a7da4becfb0b9d7921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144362 Malicious code in levels-slides-build-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8543e56fca41cf3dcb13c8ac2ec0d8d25c903a3e0f9631e4a714703b371323a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...