MAL-2025-148433 Malicious code in sync-sedna-titan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21b6da689a26b9fc953c4b51dcbd64b26126504fefc42aca279aa0cee6f1b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144823 Malicious code in meissa-phenomic-eslint-config-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d35422d94e1ac252df95e0980b4c94d42775dd5e54a3127568226091095db9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139732 Malicious code in auth-thuban-despina-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994aae1a5bffc21ac6c1e7d02d8aee1f9f9b02e29f12defd7293fa63c496981c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141968 Malicious code in element-ui-fornax-telesto-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85e910c3c85298b0c02b5c482e89d38842f8222aa17b4fd8a00163febf72fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148807 Malicious code in triton-bellatrix-dactyl-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4fcfc725bf72c153080133ef83094f7786e64163bef4ecbee61d8226ab4c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149867 Malicious code in zenobia-javascript-transport-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582ed82565cc2459fabf0fc9b1e689521a7becf110b9799fa259ced54307aa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143527 Malicious code in ignite-sqlite-celeste-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4d5abb0301795f75d05de9285062e5acc9ff864947b09c2cb09590507f1030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142664 Malicious code in foundation-adonis-duplex-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38792fd6a11ea8ef7a64db75341f38038e26db247eece3461d167c909c7481f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149598 Malicious code in xanadu-hercules-passport-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d35b3e51bfb1810de33b2f4ea9cab7df1d5791a942fbd1876fe2450e189d983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142447 Malicious code in fetch-husky-slides-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb8880199d75a5db2d02dd91a1ba2e0c5eca450d26a8d696a8074ac48e4e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147679 Malicious code in sass-loader-nightwatch-await-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca906da23f38f845d663f90e1e2e1181065ecb6793e3a00852fd12af5105e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141811 Malicious code in duplex-hyperion-arcturus-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b037a874f79cf6d1ee2fa384ac6fa8c11315b800a55c5ecfd7b9bc38dad0702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149055 Malicious code in ursa-electron-builder-helmet-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dab14f9c372453cd1539810554a152dbae1521576f8135bd17dbf90b01ab50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143160 Malicious code in halley-pino-pretty-delphinus-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c4734fe14f854cc4ba56e59672864984edd54b722ce1a7646d86b77e503662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145253 Malicious code in mysql-lynx-bellatrix-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856a800db8c30ce2d2de043e462c1171f0fd09be9141a40dcf6d159afd069206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139762 Malicious code in avior-axios-hydra-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf107bf1db4a8661d5f4e52fcdb8a3a86bf43c0f2d6f71ec9c10a8f7088b89c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144250 Malicious code in lacerta-rest-mocha-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd2cea9b29f12c8809dbad7c7cc15741dc113c1461e85f0325ef348e76f7845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140485 Malicious code in castor-hyperion-semantic-release-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf7059e4ac0020b941965c223d4c47377d71afc1a550f4172f95f30a36ac60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143638 Malicious code in inquirer-aquarius-lacerta-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c35ff5042357a7a555393285b27bd46c2e007a43fd2dc56455afcdcaf449c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146091 Malicious code in perseus-kinetic-mongodb-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbffb1173d5dcc002853b4ba9935cc827963528dfd53c8d8d7e443f7d17d8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...