MAL-2025-148872 Malicious code in uglify-js-eslint-callisto-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03565cf035b694081bdb901d1a0031e7f748cf875b1c80f18cdad66698f38aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145455 Malicious code in nightwatch-airbnb-deimos-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f752fa734e2490fe968e90b4d52adc3051e7439e54ad5906eb124cad4812e8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146892 Malicious code in pyxis-thuban-redis-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe69d2b2cf0e8724763b399bd63251ceec89ee464ac621facd41d7e590c4b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140702 Malicious code in chariklo-juno-warp-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b0f9e33aa7a188f41e281e05a9605c937318a22452e3a247858be7b329f622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143697 Malicious code in io-gacrux-test-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146490badaa1b12611a8763498d0c26ee5d80e1f64f417b1d5b7cc98eeeaabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144549 Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148624 Malicious code in tethys-mongodb-orbit-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8205abea7e11d1c740f134019ee61eb9cf962418ad662c7ac652238e7618d368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142973 Malicious code in google-xerxes-dotenv-safe-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144d57ad69e3cbf66d737ae2db5e7102a7489e5a07e294d84196fe3ebc72c974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142036 Malicious code in enceladus-rocket-centaurus-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b061d89952991a916b5ff83172655de80a4aaa23923da6edc33be57cc4669296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148726 Malicious code in toml-websockets-dynamo-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db1651cee518f3de25dc819fe2db60afd978bc23699dd5e3ec6371b5530357b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145430 Malicious code in nightmare-callisto-phenomic-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65f7b7ee44e32dda4e52a8371da05ee372c02c5d81f34199e3bdd2cc6a14edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147300 Malicious code in request-loglevel-webdriver-mocha-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fa227c4b682e4efbbf01ad0a3de65c3e135e1af06ba4b2149f3f53c6bfd3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142802 Malicious code in ganymede-hugo-phoebe-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd80c359670756604b123ce061016e43ada44c4484b1a074625aef1412f9bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142321 Malicious code in event-proxima-webdriver-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11534f986c769a549d28a9789876bdef3b468105ec0b90b7b0761a0e8c11c1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142095 Malicious code in epimetheus-ganymede-native-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f9e981e62d594dce3c76d2f3f1e4089d7417c37b7e7968a8afa7284894b681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146572 Malicious code in process-standard-miranda-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b93c77a3e3cdc4374f5677c15a17663511b67e64556c662fec4d3a4bd29ec3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144253 Malicious code in lacerta-vulcan-lacerta-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70754d37b6fe15e7022a1dd964703e0c84c878a507e041c3d5b1eb0bb87a1bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142710 Malicious code in frontend-module-tailwindcss-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0a42dd3cdb3164f9a7e9e88a05a7fdb8d309d11dc69e5b66054ef4e34eac8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147891 Malicious code in server-cassini-fornax-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eacb529e89f99a38aaf795769edfa5837e6c8f13440fdec0f882482a56783ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145794 Malicious code in odin-grus-rigel-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a756eb41b87e1ab320a650e477863fcc7edbdc9c4a284b3976c2468ae303845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...