MAL-2025-144049 Malicious code in jupiter-ariel-start-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3325f4b3314252ac40fcdb3b8162b2ab22a3058f4bc52d5f2435023ca47f44e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145913 Malicious code in orbit-thuban-child-process-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69434b1c25dc4427b5759fbfb809886fd0b6b03c34ae3d2899345893727ae36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139971 Malicious code in betelgeuse-betelgeuse-unuk-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dff0b97626e4ee33992315c9e755a79a6adc496b3debbe0e513225029979621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140584 Malicious code in chai-astro-vega-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10c82d00e8a5538839fd2d88a2791336d181d786648d659cb9956bcb6e7f93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142416 Malicious code in farout-ini-spectron-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b6b0a4b0fdd2e3265a8bbf727271ebccce0211e139ed87d81e9d6beb63ca5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139185 Malicious code in acamar-postcss-eleventy-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad70d739b42124f7635a058a8dd4723e947b5e3756838b101ab6ccade1f94b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143210 Malicious code in heka-ophiuchus-cache-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a88089822f8c73b5b0395551f87a7a085394fb6497c4c9d5cc2a81edb29f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144679 Malicious code in markdown-apollo-transform-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db4084e821d24264fb92353f0cffb2bb312a7254a0f0a8069c3ffa278f517e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141850 Malicious code in eclipse-forever-prompts-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2034ba99b3fac3845b32a389d7bd18a7f63cdd0abbde72b03416fab0083e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142344 Malicious code in exec-indus-quark-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeff126d4d9dae822df5c1ba07200edc2513a45a3299d7100ab54cfe4c4a5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139811 Malicious code in await-umbra-selenium-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddd66a2a58453a45d8f98afeccd219c9311538192deed2efd4c7bd2639be23d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148277 Malicious code in start-norma-izar-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6202e4dd1c6acb703f9349e84d06f1a5c9572de5e85b4679f9f4475475283e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141969 Malicious code in element-ui-gemini-got-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c70e5ea1a429c3dc5665a6de9895c3131d1c964a9e1b8e9d50fc6998154477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142801 Malicious code in ganymede-hexo-gemini-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e685f3ac7fac4072eaa0deac3e069d06f956e061bbbfd2b1b7c18bed89b22973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141385 Malicious code in cygnus-tailwindcss-cz-conventional-changelog-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9e92db7dae7fe60b036aa01d617d1fd2a1796d36377e1bd079809b62a7add8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139680 Malicious code in auriga-jovian-webdriver-mocha-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361e06b2d11e044ee89a2aca958f6e98590e83adc499ba15f5a39f9ee0ebac62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142508 Malicious code in firebase-process-sedna-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a235a7f24e67687810456d7ae7b66dda61ce9fa354872de73db9c6e28ace3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147990 Malicious code in slides-module-node-sass-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb6f9246b4340ea2d5b3f4d1f7e17c9848520a29053562bd88b04d07b97aa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147883 Malicious code in sequelize-update-umbra-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04b62248932ce1eb3bd7057c3cd0e5b5b2cff794acda4db4a8f091129b1cafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140469 Malicious code in cassini-meissa-neptune-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440a8689e11e8ca58dd101c2d00e557fc2643dd6d830fc6bed117eca5d9690f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...