MAL-2025-143753 Malicious code in izar-cassini-ursa-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844171ec081664cbf20fd1c8c743f71ddc8ecc7ef40ef3b54fb7c6215ede00e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143941 Malicious code in jovian-astro-aldebaran-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5201ed0abc1b5182a4dca92bec66f1c018b52ab1fbe891fa71c3a9c4f9ae8551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141634 Malicious code in development-solis-cross-env-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dcccf011de4fd5407fba424c68a7b956c9e40e3be6c84753b18110b9fc5f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140920 Malicious code in command-pino-magellan-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19c7a1bc2de7c6a8e0976668d490feb1b74fd83c7907d6b697d96061ed4ca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145358 Malicious code in neptune-eridanus-dynamo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04984e267193cc3d939a9ae85ec1f22e219b8dacd45b35cee3053f79a7d63619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147396 Malicious code in restart-style-loader-farout-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4acb30839fa2bf4533553ea8036a3328332f701c3536ff9d79c3f553ab5826e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143320 Malicious code in hermes-publish-socketio-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbee8924bf1b70d758011a04f96cb868c676ec29a65a31ddcbf9d973396b57f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143735 Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140695 Malicious code in chariklo-dorado-ganymede-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84db3f327225b1c944bb3fadcbb5ecafcfe89a049123bfc6afb6d2351171f212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139369 Malicious code in altair-tool-async-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df7ac2517321d627a4a92a8efadf37ff3d48de62cfe0c4c274c0b5083e53d7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139310 Malicious code in algol-stream-node-config-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb942e7823a23ce7a4b12798c95aa39e61aa96644c69acca7860bcca2ad9de76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145345 Malicious code in nebula-janus-parcel-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dc02b3853dcb408378255697f28364b8450c949b8e88a32ddda404c5b41fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147018 Malicious code in radiant-perseus-betelgeuse-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efda70048ed2933a54a646b0cd38e0b1e034822156a10da273d06a2de20ffe7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147815 Malicious code in selenium-sqlite-izar-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8953c630b9079488ae498842bf4cff37440b69ff8f6b186fe0366168f2c841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147882 Malicious code in sequelize-transport-wezen-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca29ff1f63a5f48497794935781fc2d1df5ee67fd2936e9dc35f28b316f3cdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140813 Malicious code in cli-ursa-lyra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b7635e00676f5a1f01eb0daf4d7a14be165f5c23502d43264abd963cd7c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143243 Malicious code in helios-xml-restart-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d63dc75a03aa2141802b7321311b220cc5902d8579b24371b901d0696be92c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144155 Malicious code in kaus-socketio-blaze-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271214cea16cd84986d48c937872fb750393b1a48276a7270a1c97950bf70f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141813 Malicious code in duplex-jsonp-zenobia-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4493a244923a35fb8a9ac3f82cca657c698d3415f7a87aa9582c28d6a90acb4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146225 Malicious code in pino-middleware-zephyr-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d06a3a7b8dcf2aafa9df282862719f4c6d00a49414d8b4e87a1b0f1b729ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...