MAL-2025-141588 Malicious code in dependencies-venus-install-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2229483646722536d85ff104226a170ef6e531b8eeef988858eb5722a8adb0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148742 Malicious code in tool-magellan-procyon-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea745c0b19f9a23301c9ba55928e5093bc020de8366bf1e1ce1ef3092e79c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139751 Malicious code in auth0-markdown-pdf-jovian-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a5d051ed94e1c11e66965e997986b3294338b4d7ffffc9246f8156b5ac1adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142009 Malicious code in eleventy-nodejs-luna-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1486a66135cac5985712266daa0e8bfb7dfb03a6066e19fe907090c033b4000b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140373 Malicious code in canopus-scorpius-kastra-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4440eb9a52bb23a9e5c49cc79350174d4ee6e6de0608e1b396273bd4996232f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143103 Malicious code in grus-taurus-xml-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e782c2cef1bcf90360829c12b7ce209eb5f9d611d67600c686d34187ee7b16e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148692 Malicious code in titan-quantum-unuk-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2442a3f0060056ceb4fb323c6c2eba78b7c4abb16e5826b0c5a13a0f9bd413da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139654 Malicious code in atlas-radiant-equinox-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2fb112ba89498f5c0a6d7095268cbecbe8befee373f618f8e4f0bcec6af2e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146001 Malicious code in pavo-loopback-proxima-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5ba9267ef221e23f87fd4055f40cd06c025a40cdfdd667fd85c1cc6574e31f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140326 Malicious code in callisto-cli-galaxy-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf556bcb08436ef6833d0ed35cb9b7b1780cbd5bea5d5949a951f74bd975cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148820 Malicious code in triton-mira-regulus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b1011fe9a27cb0c75ca7c8104767156628e1213a93bbbc953d3b2d7b7214a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143866 Malicious code in jasmine-spectron-andromeda-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e866e191c768ffc9613fc848c8413085a60f1120771feb660c7f58664e0e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148984 Malicious code in unuk-sass-loader-nuxtjs-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98c1aecea27a26e074cbf3b04cb9c22efd7f403daac4a7d58d309d2717a226b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148128 Malicious code in spectron-webdriver-chromedriver-sagitta-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06f2eec608e17c83e990fe681b4c5261e230d77ce9cac37d95422b793606bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144809 Malicious code in meissa-ini-xo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc70c450a64a22896397ed0c5c435ee915be7a5a41639f799b2c2c55782609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148858 Malicious code in typeorm-superagent-leda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4647d217a21dc4cef2ad4a2cd3d26af951f19772cac97e0e79ac9d23abdf79d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145218 Malicious code in mutation-chromedriver-postcss-loader-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67015401d420f0d76976cc33d6c4b78a0808d48575356ada771e44ec5c50d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149287 Malicious code in wasat-eris-juno-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487280957d927729660fd9c0c78a4ffdad2e80ceb0fcb8aee8bf0b6d31c7d92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149779 Malicious code in yakutsk-resolvers-phoebe-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f5fdc72d93b4fd8896a336557775e4a55ac8cfcce0a6c6bb257314f79673ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139707 Malicious code in aurora-procyon-non-blocking-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd19d7ef615107e73bf38b274c493a453d37f8f166ba1a0fbd790637833e3c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...