MAL-2025-149011 Malicious code in upgrade-enceladus-hermes-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7beddd9bb4e89c7b1ab4f83468cc131027d1fcab41a2c573179b6b4573f24977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147278 Malicious code in repository-passport-vortex-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50013f5f24460ec3a298657a62bd80113b5ac1eedbae8ee0ef592afbb0383fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143981 Malicious code in json-proxima-tailwindcss-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb74997a4a6c88093ebe105687a6d4d7790592f71e1bb9ef948236906dcee08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140299 Malicious code in callback-jupiter-indus-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015e140f9348d1ed745a5a6d1c04a6641eb654cdc38b580dd2bde82c9858ca31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141137 Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139282 Malicious code in aldebaran-inquirer-sirius-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f156ebcb080250b5894ba54bc2119f15aea901db4121b5dda0df4c31a2490c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149684 Malicious code in xenos-magellan-callback-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bf51ef45ec0700ded4e3016233d1505c657e69a98f407700b41894c37d3d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139239 Malicious code in aether-procyon-corvus-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8123898624474af520819d1c6b677e6d1936dc7da4b7636be947bb8d4405b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144947 Malicious code in middleware-barnard-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ffafd3b6e043d42bfa7dbb3f79f69ac43015f66786a1e96366df41603d8f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147550 Malicious code in run-script-ophiuchus-cors-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a09fd213361677312c1ca5e7462ebe175bcc01115ff87099c130dd7a70fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146069 Malicious code in perseus-blaze-ganymede-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c36548131bc59eca950e04d1b40f3421ac426a7189a8aa205124a8688d65eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139770 Malicious code in avior-jabbah-proxima-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfaf0f7900b83bfaf360a985b7e89565f43d3bc84dd987ab108ff935e06aa7fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146281 Malicious code in playwright-fornax-enif-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91a879071e13ae5f0848d6bd342f7f9dbd34ab7b15720262875b6ed4438c25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148897 Malicious code in ultra-gridsome-aldebaran-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f8327283601fb4393b0aa988429a28162ea15a687d0f2607dd64d2ed36d158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141819 Malicious code in duplex-protractor-npm-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f75328c3b60f551922c53082dfc1c61f9372109ebd52c544380f42f1c95a86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144718 Malicious code in markdown-xanthus-less-loader-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30fd4b247599dd9ba70c60cc7739635c150dbf43b468f570acbaae0ad26e5127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139391 Malicious code in antares-aurora-cassini-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0c49d28c416f3eddadd64831714dbc8fe86b0f2e021da175e5139de59fe4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-eslint-config-elektra-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a392c43ff4b5d26b28f817c91d48ec99b3a788b71d5993ba035c26f35df3e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147564 Malicious code in sadr-jest-tool-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925b1ba67d5b197bf2456562535ef44ea74362f49ab6741457c03efadb057eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147170 Malicious code in rehype-gravity-rimraf-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d9d517bd3ef9e1ccc730fee6c77df43f426450953aedfa0e9b2ddac240292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...