MAL-2025-149612 Malicious code in xanadu-tethys-rigel-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62550c057a10297babdc1cce7d9df5ad7a9930be11ddc85bfcb3e908f20ec4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142449 Malicious code in fetch-jasmine-frontend-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc5d365dcce5e2b678e7f28c3bd51608c01363800de40988c29530bfb10e1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148493 Malicious code in telesto-enceladus-process-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24364b2e6c5dc0894a47fbb319e1cb52083ba1222d56b868b57bff6f62ef7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145886 Malicious code in ora-jekyll-nodejs-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99ac7ea31cddaef6cbf34ea2f14a323c48b85e8610b6bcf49716db4c0d7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143495 Malicious code in hyperion-release-it-halley-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6398d96b583df5659abde30c24efdd2a4079e89db4c12b764d5adab1d17b39ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147631 Malicious code in sagitta-xml-child-process-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a994e3d9f806b277e2a6fe89497b8bd8b217966da20b43ec15ace8cfad2690ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144092 Malicious code in jwt-wolf-solis-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb344acbc26490eee3304fe44f348bcab567cb4f0d1960e50a2708cd20e0220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142998 Malicious code in graphql-chakra-ui-luna-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5906ee4986d40f97876630539dd8bd9592cc5f5d37491360a280122f0aa9f4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145532 Malicious code in node-sass-concurrently-markdown-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecbf1725b1fe3550e4535c888b84b76843307d046713ddb77493b16889d15e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148974 Malicious code in uninstall-zephyr-publish-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b931f7d82bdf49c8bd7009b6500a4b5e18fbc27af224965bbe9a5312f8102958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147317 Malicious code in resolvers-backend-antares-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcdbeb5f3f8404e93c29ffd571f029c12b4afe279214521372044e00e6e2b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145585 Malicious code in nodemon-mongoose-middleware-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ef2a72b6763ee7187ed22b8843e8393a1e99887cac99bf5d7ff89efb0104d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147509 Malicious code in rollup-plugin-async-shelljs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd26dff81921adafb42e1a04235e7606401fabfd2575d8186a6e2b9b0acbbe14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139599 Malicious code in ariel-ursa-nodemon-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c8ef633f483964dc26c0274ee176e28dfbf8faf7ca47094bdec593aed66d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142483 Malicious code in figures-spica-halley-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161b803565d9a0152ff60b29160803c2711840c6794f148fa262660e872d602c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147674 Malicious code in sass-loader-magellan-build-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f279172703f9e96b32c6523d45306163d7166851494af28f175ff70d6bbbdf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141973 Malicious code in element-ui-luna-betelgeuse-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2fa7918448fccb2d3813a943600f31453a2259a8ee9151f0ecf849537539d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-sagitta-comet-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a6eaa1c93981f7cd8b58c6fe5d9550b619eb1a489d534602df667690e1e672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-mutation-private-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127757ab576fa8404175dbc8ff025fa35671e77dee7e5daf3268fd955b65092e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-miranda-apollo-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7684b2c1caccbc41129dd131debd88ef627e42a25ac781346f8d69986211f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...