MAL-2025-149611 Malicious code in xanadu-spectron-mensa-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6adaf03df6971682a879f3ec155eecc20479320b02d4c4cedcb8ecd1c7bce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147134 Malicious code in registry-server-jekyll-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae00849917075b7ff0a50029a91669d6550d116557fba279eb8d538fbe4ef6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147550 Malicious code in run-script-ophiuchus-cors-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a09fd213361677312c1ca5e7462ebe175bcc01115ff87099c130dd7a70fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146654 Malicious code in promise-umbra-achernar-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfccc064fd329dd2cdac358fcc4e424a92bc45e143066d8dd5c6ff834c8a6bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146364 Malicious code in polaris-schema-browserify-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf843fd2ae6038c2f101230047b7c1b1aec83b80da82a3358c35554c483a276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144923 Malicious code in meteor-odin-kastra-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807f19146fb1323fc3397526aec5abed6b4f21c91a207e554c5fe63341877ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145002 Malicious code in mira-atlas-event-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d0b59465aeb110ed77aa5dc35e61cee72f2d0b21f1d84fadeab03f8f243a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148648 Malicious code in thuban-development-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141819 Malicious code in duplex-protractor-npm-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f75328c3b60f551922c53082dfc1c61f9372109ebd52c544380f42f1c95a86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148301 Malicious code in stop-polaris-gravity-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eba5f01f9a9e3d932f8d07a8043fff56153b5b693c9f0aa45bd3d51c997c687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140334 Malicious code in callisto-husky-slidev-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1929a75c829c843ef72262bb4a5950eaaf009bb43cc62551856338044b7dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144718 Malicious code in markdown-xanthus-less-loader-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30fd4b247599dd9ba70c60cc7739635c150dbf43b468f570acbaae0ad26e5127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148574 Malicious code in test-meissa-node-config-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622677d0278a9dbe3a8d54b8bbb8f19b1d321ed58e50002428cffafe7176db8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140521 Malicious code in celeste-rimraf-despina-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5e01d527e81d1b1b9b8d53ba7fcef85426e7e40a6f5e70ab92bd16a5688c3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140189 Malicious code in build-quantum-alphard-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b512dcd27a64dd3be41f57177a7e040aaf99d4c6408e9f96c1f7d5c9b3ff8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140949 Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142489 Malicious code in firebase-charon-node-config-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141387 Malicious code in cygnus-umbriel-inquirer-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0bf2ab43841e4c62581daea5b6a0f8e07b10b3a8a9717077ae93295ea710f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144891 Malicious code in metalsmith-ultra-ceres-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776689ae45d74b271ed19b9bff9e67824bd653c6eb8a6ffe860fe7b8fa4dbc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142306 Malicious code in event-backend-bellatrix-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5595b1d4ec3c6ec493010da0a65ce1110cccaa8064745ea9cb362a6791bd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...