MAL-2025-146996 Malicious code in quito-kronos-sails-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e7f6c449585bbf20e538516ed1eaa838c922df2fa2da21a0f4b08d049d43e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142614 Malicious code in fornax-corvus-socketio-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b118c859ce159a51547289bf829d5e6adb46f1e598638f8044f7c778c3486b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149305 Malicious code in wasat-warp-apollo-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd93a066455a605174fc758b22b8487262f6e9ca5639cd5ee67485076eb00d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149528 Malicious code in winston-sqlite-typeorm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0583ba8d9067af98e95c066865b38f493fe46011683758f8afbd70d2cea4b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148494 Malicious code in telesto-eslint-config-writable-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25b3952db8fa305c0c824b0b07cbcb4a584f3bdf7b0be9278b4618292ff99a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147008 Malicious code in quito-websockets-aldebaran-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2c0e4c6679ae7c3900d74f8599fae88292ad7ff7599639ac76f3bdf64e5c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142077 Malicious code in envconfig-loglevel-odin-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b321c45b81b732779a0e076155f3dfa0b59bf86d2bd3064660daeb735949ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144291 Malicious code in leda-rollup-mongodb-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8e055ded6c374433931709e21ef5dbbc32dd336f2b829628a9a9e900854e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139342 Malicious code in alphard-test-dactyl-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac07eed232bd602bb75c1b252ee185d4d14cbfb07298839ba8056d35a032c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144552 Malicious code in loopback-global-levels-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c51156dce9de4ef059e365316106ed44ef797131009a2bda0f1286fa23f7a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149362 Malicious code in webdriver-mocha-sadr-halley-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c3e5c96970e1b1a65266f61d587831200fef11a12d69b9185d22d8ac142598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139283 Malicious code in aldebaran-nextjs-ceres-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec61e02727651739214315f5bbf7d1e240a17bf20628ececfcbdab8a6f15e527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141055 Malicious code in configstore-jasmine-ceres-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b506749090be0e7373a54672c453e5a35f5a6c0622992493a6517898898abc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147104 Malicious code in redis-install-xml-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d829a1e2ff41521392076b69e3c830de2f7537640987017337f47472c4500b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145922 Malicious code in package-auth-xanthus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68cc5375476c81c36c83cc97476d3cee652e85e96e6b4b8bc0d89151dce75e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142799 Malicious code in ganymede-epimetheus-terser-webpack-plugin-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d3c3743af2962a1cc129f96e63d2dfb37e17bc2c226e24a59dcef2c0887915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147132 Malicious code in registry-pegasus-ganymede-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65afe8cfd85ae35917f7bd628db75ee6071d0dbee2b3c66a8420d9dcea9117b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149500 Malicious code in winston-izar-winston-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b9406e604fc2c6303c12f06f2160878421f2a4257836f24b73c851fa490122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145232 Malicious code in mutation-spectron-elektra-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfc5d8be3241831b91454e7c38a3c68b1bd22f5176c552f8e6f778fdcaa045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147578 Malicious code in sadr-upgrade-airbnb-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc82bd40d74505d643d24b7f73aa5b7ecceb707e680b6eaf31a2fecd6cda9766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...