MAL-2025-146069 Malicious code in perseus-blaze-ganymede-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c36548131bc59eca950e04d1b40f3421ac426a7189a8aa205124a8688d65eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149106 Malicious code in venus-deimos-public-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d0d778c8df669fba403d905c69e073ea9e7cb886541e7d250b5deeda1742b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147278 Malicious code in repository-passport-vortex-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50013f5f24460ec3a298657a62bd80113b5ac1eedbae8ee0ef592afbb0383fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141244 Malicious code in cressida-sirius-rocket-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b239720987b2244288b57886086568311f5253ddb8d036fa28b57d806bdb167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140014 Malicious code in betelgeuse-wolf-octans-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4e62b6c89c77d85c75efe05cc02347324f258c5c99bbebecdd1416bb26a65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139282 Malicious code in aldebaran-inquirer-sirius-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f156ebcb080250b5894ba54bc2119f15aea901db4121b5dda0df4c31a2490c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148897 Malicious code in ultra-gridsome-aldebaran-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f8327283601fb4393b0aa988429a28162ea15a687d0f2607dd64d2ed36d158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149071 Malicious code in ursa-reveal-md-antares-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc48de705e14b0fc19c38e6070047b60ded65999d88f313efbde52229f4b8df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146281 Malicious code in playwright-fornax-enif-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91a879071e13ae5f0848d6bd342f7f9dbd34ab7b15720262875b6ed4438c25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149115 Malicious code in venus-materialize-middleware-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7edf3762282a5e21f97e55705f10dce56e313a7824add172bb388fa0ff9e452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145656 Malicious code in nova-css-minimizer-webpack-plugin-prettier-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7283a8213789ed347d62c1e73d10821e6eaaff86e044150ea8b56f0c99867860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144010 Malicious code in jsonp-spinner-dotenv-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3574701b933a49c45959aa3568b887dcfd3d83b1c6197131ec3d1479d610ad0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144823 Malicious code in meissa-phenomic-eslint-config-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d35422d94e1ac252df95e0980b4c94d42775dd5e54a3127568226091095db9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146515 Malicious code in prettier-stylelint-publish-ganymede-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bee700dd60f89d7636e9dc4890f0ea34fa4b85a80efabd156924d8b4000d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143197 Malicious code in hapi-public-unuk-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d5a3b35db50fa8d9809095d9a28923d3f8749ef04d21133640662959f81ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140873 Malicious code in comet-cygnus-antd-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6bff291e01fd22857014fd822605071aa490ab3fd33da969a70753a7b9f34a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141811 Malicious code in duplex-hyperion-arcturus-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b037a874f79cf6d1ee2fa384ac6fa8c11315b800a55c5ecfd7b9bc38dad0702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146439 Malicious code in postgres-meissa-install-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78e694afa9ed340f715efa6d82a75a2aafd8cd410e334c6974fb4f9d2fb94c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142149 Malicious code in eridanus-jovian-ophiuchus-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6feb30322cdf7740a511ae31ec4c0725ef5694106c244812e9aaac47805ca133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142996 Malicious code in graphql-cache-dactyl-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c89e45b27de330b847c8bce6f45bfee848d5d30bb49965b5d63299d0e86ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...