MAL-2025-148690 Malicious code in titan-pegasus-transport-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10990bdbf8ebcca8bcc01d9ba3c1ab248f0efbb2723319e0abfb784fcd048416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146962 Malicious code in quasar-transport-spinner-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1d6a0636d5218446d56d763786f84428863756f135aa1a6dc761a0c94d774a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141051 Malicious code in configstore-firebase-dotenv-parse-variables-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8bc64e640d9cd2b3a41882b58e530631f6762fcd827528fd2025ba8142320c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141423 Malicious code in cz-conventional-changelog-kastra-rollup-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e9525cff2d4f497c1e161782ad3e5478832085c188b7182639221632cc9fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145806 Malicious code in ophiuchus-await-ini-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71406720cd9858605a8e1fb3b053d8fa676c64f342722c5abdbd8c8436896b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146095 Malicious code in perseus-loop-equinox-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c15455fc23e56cc25186b74d796a66dc7b8c99617e33a2e861abadcb052f49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142335 Malicious code in exec-antares-prettier-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc33f258f0bf65bad6cb0915fe1fb874bdd299bdd68df3a0c25c770b672846ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142040 Malicious code in enceladus-ursa-bootes-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3245fc3adbd9e9852df9a8e88db35cd0e9d70c380fd57dcb2a3c0dc2e340d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144984 Malicious code in mini-css-extract-plugin-ophiuchus-lyra-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee149d2a64f1d6e8ddd300e94d9454e3a8e857f650f27a40fc08e1c517eeaa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149454 Malicious code in wezen-electron-scripts-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d339f2a78f9c7afa64c8947b19a8574864e8d1db64e8457f5f87fafa8d0bb44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144351 Malicious code in levels-carpo-fusion-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d8d5f23e9140fa627019e2ea08fbc2a8abf4e959025b337ee09e444f301e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146771 Malicious code in public-zephyr-neptune-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072d15f062054089466bfebb73e1f6dba852a9ff2763e0b168a42e2ae7742225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146838 Malicious code in pulsar-orbit-capella-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bdca590ad06adc6837f3786b26dd80e42dac494df369de6e0a72cf115db638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140421 Malicious code in carina-postcss-auriga-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f7eb49ca9a8f5960086bc7093a2e8660219468302235c18df46dce850a980e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147201 Malicious code in relay-jsonp-jsonp-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d0924239b0952e68e7c66673d7599bb260c6bffa6d04b6016516b3d444a885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143190 Malicious code in hapi-meteor-chromedriver-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33eb4d562c669c05b1e28cb2ae849a179412bc5bed948bd6a294ab59ee6fb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143118 Malicious code in gulp-mensa-izar-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75fb3ccefc8bcbdcfb2e4436dd2f9ac85c0abd3f44fc280455f24a5c155ef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147293 Malicious code in request-event-antares-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450c77c16e7214dddfd423894d2688c8084da5ed5cd5285c01ccd574dca75de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145687 Malicious code in npm-package-octans-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0eb561cd5abc7f81e4ba2d12ca22ab8d7fdcf3401a02981a73418282539144f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149459 Malicious code in wezen-lint-izar-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d39e5be3a3dfd646a8309b4a091a11312fe296bc257aee1044700701d6db189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...