MAL-2025-142754 Malicious code in gacrux-capella-nconf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dee520074e43f20c631e67eb9acfd0c743d02d0f0683e038630ae40bdb9b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148922 Malicious code in umbra-meissa-yaml-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0358f79b248e08d84ae4d893176ccfc560a46651915f8df43cd8af7d7d3f62f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139193 Malicious code in achernar-charon-triton-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e315255af8ad80e64bcb28a2fe57e4823a3a237ddc35469324e0c3ce7b1f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140902 Malicious code in command-fetch-sagitta-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886152bb1e80cce3c0d2c55fd7465b1020c44e96c881ac2cf8721beb2ae0b97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143837 Malicious code in janus-style-loader-alphard-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46be8a3b2073afdb630484fc8ae7adbabb0cdfec815282e31cf67e4fbd09eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148692 Malicious code in titan-quantum-unuk-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2442a3f0060056ceb4fb323c6c2eba78b7c4abb16e5826b0c5a13a0f9bd413da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143746 Malicious code in iota-umbriel-duplex-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0691e96e52fec2455489834d19f595677cd7b3b4d29206b1bc039a088892db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146911 Malicious code in quantum-parcel-tailwindcss-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384fa299b65b436f3028ca3a4dfe779a34f359b58801ff82e30ea030100e86e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140741 Malicious code in charon-yakutsk-elektra-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d980e0c9ef55991ff073ec09e7d4ea3a2e38daafe740bbb3e0f77b0e64de402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139473 Malicious code in apex-bellatrix-lyra-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32274bbf8d68aee016a8f42086b4f0e2654b8650a7fcbbe110eb525748fb342f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145055 Malicious code in miranda-resolvers-wolf-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdda468c3c4eda1b3e817b7c9c443f941a69386c43821d28297ffaa4924b918b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139527 Malicious code in apollo-repository-uglify-js-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9450e460da60e016b7b255ddec614b5fe0154f3e89ef1ab9d4185ec78b6a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147532 Malicious code in rollup-proxima-semantic-ui-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653895f8925b05c1c5a5f3796d814966f8c2eee89351d88d6f07bf2bcdbdb890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141559 Malicious code in deneb-testcafe-dotenv-safe-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a6f8049199b598ac6a94328e799d71ab971e6ac6641d4f180daf58200cba22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139894 Malicious code in backend-phenomic-csrf-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42052997348b7f8d46c2e3b6c0dd0e87440a0ca439cbd7931bb5b4ae3fd164e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146626 Malicious code in procyon-wolf-middleware-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b4bf30966429dc013b6a8c5fbf7f2bd149e3f37da0518784c5d4f6d5e13747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139260 Malicious code in airbnb-node-sass-leda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b532c53d3667571b50126b7f8df59d25d564f7f2f526e3f6f2b6dc5917495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144102 Malicious code in karma-dependencies-geckodriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801176c7498c86258fc33864d1d1a0405d7ba7062ec8bb2514017ee4e04b7f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144180 Malicious code in kinetic-ophiuchus-antares-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1029ceb8cde15110cf4088fc5abf83c8ab1b9dc7c09f0ee072aecf0241750f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144064 Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...