MAL-2025-149897 Malicious code in zephyr-standard-arcturus-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfb0d4f3fef5875a28ff7fe0d5c62702914e16fec1826a64f35118d8a99b928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140278 Malicious code in cache-ophiuchus-node-config-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b0d81771865bb974c560ebcce579067abe56418b4aab7d7db4414d5caf5ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139956 Malicious code in bellatrix-rest-blitz-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d051a410ec4e152e8429393d4f69c4e39cb62b3f53704d5f7a54d4a087b454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144373 Malicious code in library-chai-carina-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf871770e94c007e352f573d44b0c9597e55491ca57363731adcfa816c01b711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148154 Malicious code in spica-ceres-semantic-release-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94907f605263e00cb2d997529dfc2248d32cb9f5aa066cd46b1869ed5c1b64f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144072 Malicious code in jwt-figures-ora-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d01d7893c541cee3e42f365513a2171568f4818971fd777e268fd982ecb98b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145403 Malicious code in nestjs-react-bootstrap-dagda-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab8f182e93ed124506286a8c5600abd6e108c7e992000981c8c480610039da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141150 Malicious code in corvus-dotenv-safe-uninstall-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc13b358ae761bf55bd16caa1893474822c15d72cabb164ab435a6625522aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147349 Malicious code in rest-grunt-gatsby-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65af85a9b14891de6552ebba028cff66951e27bfb7ad69e55bbbb050e2926389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144167 Malicious code in kinetic-delphinus-farout-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f370a395c2d47ea909b67d7db2433dbcdc997442f2a384b050ea0c2e241a773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139968 Malicious code in betelgeuse-betelgeuse-carpo-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9255a7aef8d17bfbb639e1ed68efc3bb23a1a2f2b680f8f22ad8b517075a3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149197 Malicious code in vuepress-pegasus-gravity-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f30b9d98da16f6d11401b6e3f4e7a2a556ca0adb7e3e59cb98234cbe0a3409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139538 Malicious code in aquarius-jwt-bulma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6563a0cc256be828325c533ef3b8a3fa946a92f767374fdfd71f591644edea79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148872 Malicious code in uglify-js-eslint-callisto-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03565cf035b694081bdb901d1a0031e7f748cf875b1c80f18cdad66698f38aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143309 Malicious code in hermes-concurrently-hermes-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0fc504fe20b5d7a624bf4f16d4f30312aae20867a0ab2bca5a06e6e80bd777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145070 Malicious code in mocha-chariklo-callback-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3aefe7e0ced759fcb278ff76c3e7e7bfaa86bfa349f129514e73a76812713f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140702 Malicious code in chariklo-juno-warp-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b0f9e33aa7a188f41e281e05a9605c937318a22452e3a247858be7b329f622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141021 Malicious code in config-foundation-equinox-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b24c8251b01481291011c1b04906ea934e07da3ad0d80c98d0376d16886f325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146026 Malicious code in pegasus-envconfig-wasat-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb3c8a932b15d91dfb13038e031e46cecbe14cba78be0527c74a12a035d982c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143868 Malicious code in jasmine-typeorm-rimraf-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8a392fb62946ebfa7bf33c9cdc619ac1d918dd0e4e847bcf89234e2b4acbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...