MAL-2025-149598 Malicious code in xanadu-hercules-passport-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d35b3e51bfb1810de33b2f4ea9cab7df1d5791a942fbd1876fe2450e189d983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142447 Malicious code in fetch-husky-slides-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb8880199d75a5db2d02dd91a1ba2e0c5eca450d26a8d696a8074ac48e4e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147679 Malicious code in sass-loader-nightwatch-await-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca906da23f38f845d663f90e1e2e1181065ecb6793e3a00852fd12af5105e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141811 Malicious code in duplex-hyperion-arcturus-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b037a874f79cf6d1ee2fa384ac6fa8c11315b800a55c5ecfd7b9bc38dad0702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149055 Malicious code in ursa-electron-builder-helmet-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dab14f9c372453cd1539810554a152dbae1521576f8135bd17dbf90b01ab50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143160 Malicious code in halley-pino-pretty-delphinus-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c4734fe14f854cc4ba56e59672864984edd54b722ce1a7646d86b77e503662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147988 Malicious code in slides-inquirer-delphinus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f99d7fb9432dd30ab8ca0c7996dc80b6510b5ece02616847e2483aaf06702d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145253 Malicious code in mysql-lynx-bellatrix-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856a800db8c30ce2d2de043e462c1171f0fd09be9141a40dcf6d159afd069206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146598 Malicious code in procyon-izar-uninstall-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c6818e6c6dfe07a4bcc8f47737bb84825b4cf9b6ae3355816cdb6d9d6dabee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142709 Malicious code in frontend-mira-indus-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2f5b74653ef8684794a4ecb5d3a754b2e0b9cf2db7fd5352e3ff15ddce16d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147796 Malicious code in sedna-start-semantic-ui-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca2e2719f9edd696a7a5d29b1c059a7717eae9f96696261990915eb6e34e7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139762 Malicious code in avior-axios-hydra-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf107bf1db4a8661d5f4e52fcdb8a3a86bf43c0f2d6f71ec9c10a8f7088b89c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144250 Malicious code in lacerta-rest-mocha-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd2cea9b29f12c8809dbad7c7cc15741dc113c1461e85f0325ef348e76f7845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140485 Malicious code in castor-hyperion-semantic-release-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf7059e4ac0020b941965c223d4c47377d71afc1a550f4172f95f30a36ac60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143638 Malicious code in inquirer-aquarius-lacerta-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c35ff5042357a7a555393285b27bd46c2e007a43fd2dc56455afcdcaf449c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149077 Malicious code in ursa-transport-slides-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d20830d42f30118a721980156a6c5df9fff391053a583d5d02399e0638132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146091 Malicious code in perseus-kinetic-mongodb-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbffb1173d5dcc002853b4ba9935cc827963528dfd53c8d8d7e443f7d17d8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142323 Malicious code in event-sails-public-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d555647d04d651bab45eb39b53f266c9fb4e89c2b9419b02a13f17aa58859d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140509 Malicious code in celeste-impulse-private-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561829010b1dd2399a0da8cf1d3b0989a0adff576be915b99df64aeae7651dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147962 Malicious code in sirius-magellan-middleware-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e674beac4b41f12a4e52a059665b59793ad070f458d0a00fedf036e9556c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...