MAL-2025-142447 Malicious code in fetch-husky-slides-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb8880199d75a5db2d02dd91a1ba2e0c5eca450d26a8d696a8074ac48e4e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140509 Malicious code in celeste-impulse-private-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561829010b1dd2399a0da8cf1d3b0989a0adff576be915b99df64aeae7651dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147619 Malicious code in sagitta-soap-jabbah-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce1eac91ce5b3dd1ba6b6ad4dc0e56d557a5b7264db95f7ee63c57767b13c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144441 Malicious code in lint-jabbah-elektra-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b1393ad21c122c488010604c363c0c5385feb33514676d1aaa1a267fa1ed98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144399 Malicious code in link-babel-rehype-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e06c6128285df382318c7cbfc0ab35b0ede2d70825130103f6a655c3d8ab296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140574 Malicious code in ceres-react-bootstrap-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3b4e726dde90fa56bb930d14a2e37b38d2948bf534b5ec6b166ca2e2d78a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145765 Malicious code in octans-concurrently-scripts-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f839841b4ac2990fd955ed429b446fcb392f955126d839c514c4c9c01d124e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139732 Malicious code in auth-thuban-despina-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994aae1a5bffc21ac6c1e7d02d8aee1f9f9b02e29f12defd7293fa63c496981c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144628 Malicious code in magellan-concurrently-markdown-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9abaa4ad316f22936dd5b88b8155e088efef33268c84c604f46a073977c2b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142322 Malicious code in event-repository-cordelia-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ca10128ca1c595bbe11962c6144feccdb2b3ab4f06fec3de750790066d5095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-got-hermes-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25f97964c2f26070ac5974345a378e144d266f2570ec41d0fa375f8934c90a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145253 Malicious code in mysql-lynx-bellatrix-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856a800db8c30ce2d2de043e462c1171f0fd09be9141a40dcf6d159afd069206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146674 Malicious code in prompts-rehype-got-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9301ccb648a560bfe3f1006730b640d6ec4b2b9c6676afc853882ca75a2022d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143205 Malicious code in heka-express-axios-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33e9feb5948da23cbdf036738822ea99bdbb64939a1ec88089a7d78643a419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146364 Malicious code in polaris-schema-browserify-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf843fd2ae6038c2f101230047b7c1b1aec83b80da82a3358c35554c483a276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146557 Malicious code in process-mocha-loop-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c79f04280d8b86e33821a1d858105a2658e0adcd0b02df7d2a5ff349d20e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144938 Malicious code in meteor-standard-xerxes-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f7a05cf55a3f259e19fd2c4fafa2fc5bf3d5d7d3bfc1d8abf65fc3790d2bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140014 Malicious code in betelgeuse-wolf-octans-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4e62b6c89c77d85c75efe05cc02347324f258c5c99bbebecdd1416bb26a65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149402 Malicious code in webpack-perseus-version-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0bd145a99ea5128f5d6470882e3e2efddd123e1742a090cbad1d83b53255df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148654 Malicious code in thuban-less-loader-spica-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75cf876aa95769e2ba3d7933527e5c1a77fc9d3cb34fe7dff7f4751c282c6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...