MAL-2025-149703 Malicious code in xerxes-farout-xenos-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c56a819dfc4ca3025766300e1e0f6e332ed03966fc9003cb4980e080f0a8f2b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141582 Malicious code in dependencies-rimraf-orbit-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8dbdb8fb598ace85ab132ab2e8e249b3b8f37c34607f4a50808f231b4d761e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149276 Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149052 Malicious code in ursa-corvus-aether-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78819ffa548622865ca6465342d6402a8002cd352fa308a1e580dbc5f296c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143746 Malicious code in iota-umbriel-duplex-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0691e96e52fec2455489834d19f595677cd7b3b4d29206b1bc039a088892db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139471 Malicious code in antd-yaml-rate-limiter-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412d07eb97a4f89d1264c3ef0f67ce293e3a765abdab4583afe95d08ead7e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144064 Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140774 Malicious code in chromedriver-husky-flare-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427eea3861085f119e61e49f48fcc8a63b170484eae6227054dbe4fe1b2baded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142915 Malicious code in gemini-relay-readable-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6153588fa07b05da227571629362574876da36eef3b7b257efd00bf9adc0f53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148969 Malicious code in uninstall-sass-loader-pegasus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91affc7f9bb256fde82c4268b20d43912ffe30773a0fae9ed34039f4e000131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140831 Malicious code in cluster-markdownlint-equinox-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c171761f3cbbf27925b3aaa8a534f93727568b8a0eb9097d587828f151e01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142001 Malicious code in eleventy-kaus-cz-conventional-changelog-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04bc3d838e3b526c2689e5089a00ca9f5609170841e9b60177b38e98d61ab92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139260 Malicious code in airbnb-node-sass-leda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b532c53d3667571b50126b7f8df59d25d564f7f2f526e3f6f2b6dc5917495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144111 Malicious code in karma-hermes-supervisor-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ed3ef202182c8794d3913afa6b9880d212ad731b141c6a92437e1e35b1f213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143116 Malicious code in gulp-iota-sass-loader-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348f1372ca03ce7dde0184d8847197c18ff8c541c9c70bf0f2631bc74efac9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144126 Malicious code in kastra-phenomic-eridanus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b4edf03fe4eb9a57ecb323f2a9f3f66d89c70eaa645d4cfdf4a30ac5e9285e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142761 Malicious code in gacrux-dactyl-celeste-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af762c09d8dd6efc667093f87bbe59e23830d072f15c7020ef8e9eccf43d0923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140456 Malicious code in cassini-antares-zenobia-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae175ab6d944e9cf9204c7d27941811023acf0a0b69313e5511b013600b7cb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139894 Malicious code in backend-phenomic-csrf-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42052997348b7f8d46c2e3b6c0dd0e87440a0ca439cbd7931bb5b4ae3fd164e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149771 Malicious code in yakutsk-init-neptune-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a512de47dacac8b7e10ad032e5bdb245b16bd64d64ebf701bbd3adf8efbc71c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...