MAL-2025-144054 Malicious code in jupiter-europa-test-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e37cc939f7b9dd9e11d6abaf23051989e7581681ed85c1f58e2ad2e96a039d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143284 Malicious code in hercules-ganymede-geckodriver-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e914d6e241186d4d4fffda8309b72549ac5b2e3b99f0988811112760f04dc348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144809 Malicious code in meissa-ini-xo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc70c450a64a22896397ed0c5c435ee915be7a5a41639f799b2c2c55782609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140664 Malicious code in changelog-concurrently-subscription-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83b2e12272a8e785079ce5d459cca1a904c1e9310d88115531e97fbf868592c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143183 Malicious code in hapi-hyperion-corvus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f90757f777313f495bbab629a08d287877e9996063f135538f6c4a9ca5cf61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147498 Malicious code in rollup-global-indus-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79361108aed6e40411d643c21feabdfd09d5e67872f95b55d72cc8c3d6c230da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142274 Malicious code in europa-jekyll-xerxes-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1705ca9806e9f300c9c1ca012b4bb3beb9f94e83288c76176704730d08ce77f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141453 Malicious code in dactyl-remark-titan-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66bc1ea42bc98642c4ab4324c7848b4233721a1d6d28ec5e7e7d4559a5095a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147183 Malicious code in rehype-run-script-soap-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c743fbefc7e8cd66f8c40a9ca654f606ec61084227cc77fff259a56548994d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144383 Malicious code in library-pavo-impulse-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d31e4d280cdca6c12df48113661a624a5d83d3a2ed8857bd5d0f30f6d9198c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141716 Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139922 Malicious code in bellatrix-aldebaran-mira-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38304ad9ac9cf5d12c69ffb1106360ccd3571f8ac251eae2684948585e5a01cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142244 Malicious code in eslint-plugin-thuban-firebase-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a802786c89a13e156760fbeb7db45c40c68ecb95bbfc4db4e4fd6dee4a743054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139837 Malicious code in axios-protractor-loglevel-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d16a7033d42bdb4fbfafe22f856e5fb27e0364dea6cc4a01772b651a18961d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145196 Malicious code in mui-carpo-publish-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2be34a3c332013cc6fbf0b15eebd1688174c135148bd0bc0053a46ddf30815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148128 Malicious code in spectron-webdriver-chromedriver-sagitta-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06f2eec608e17c83e990fe681b4c5261e230d77ce9cac37d95422b793606bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143050 Malicious code in gridsome-release-it-cluster-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8a82147ad830cbc9da53e0a7feb5a348448c61a836c3fcd2825a9c42a3856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143552 Malicious code in impulse-react-bootstrap-gacrux-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeeb91210fb4388357c7e75117778a2bbbfacf234dd1abd657a2fb9009212a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148289 Malicious code in stop-chakra-ui-html-webpack-plugin-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a04beb1d94e9aa6142f6535b0c0dcc3320aaeb6a53e45353f3211d6f345730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147495 Malicious code in rollup-eclipse-equinox-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d12da5b6ec2aea61ffdd55200ca99828c12b9cf613f2732780c089bff606e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...