MAL-2025-142148 Malicious code in eridanus-io-andromeda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61966f7ae737ec265e1bf5608c3a100b68294f97ab9385b45a839ed4ada343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139496 Malicious code in apollo-blaze-rate-limiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105306c763841236f419b884919f6f97a6b63b25a0c00e39bd178d7a8c251e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146057 Malicious code in pegasus-superagent-await-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433c64b86140160dc79b6d62fce33d4cabe64d2086fea84910897f2956dc9cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148428 Malicious code in sync-perseus-airbnb-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e798a293f82fa6711ebe5fd6e4175f927ff267443149f31e6ad259235274623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142078 Malicious code in envconfig-magellan-magellan-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b780c70358071a961c42362e095ee5b272314df1a7a99c400575946abdf7772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147585 Malicious code in sagitta-chakra-ui-nightmare-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056f665d6e1e48a592cd962a70275782e23b71ab0c7b2b8bb2f3c2cd44ce22ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144682 Malicious code in markdown-elara-buffer-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3619655a017bf4695cad82d92475a15b8cbe18526c299bc7e44b636e1a5c80dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142831 Malicious code in gatsby-antares-writable-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26b78aef3942d60119f4eb9ae9dcea573b79c20d31c8aa198ef687ab7d493d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142965 Malicious code in google-magellan-config-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1381d36d49061952c1f910630b1e1936b3bc590e02317d6cfb75526024ba2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139397 Malicious code in antares-child-process-algol-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee989f66e1b782655eea49ace8d232ca5718d86a06908628e76997e997f869f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146603 Malicious code in procyon-local-npm-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57fbdf3e9b64bd0336eec4eb812a9f46e802ee7dd443fbdc3369a8d80c3be236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146071 Malicious code in perseus-cache-remark-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b778b31a4c65c8bba177c7cac5af3c1cba209d38f682bbcb2d35fae5df195fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143434 Malicious code in hydra-bellatrix-backend-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ab935a68be6a70f7ba6e91ca1a630274d8ffea77cffed2afddc09aacf072dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144351 Malicious code in levels-carpo-fusion-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d8d5f23e9140fa627019e2ea08fbc2a8abf4e959025b337ee09e444f301e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140177 Malicious code in buffer-venus-mongoose-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 275bd9bf8bcf372c892a5b5e40e92a005b985000fedd2730df4f2ad8c4628dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141239 Malicious code in cressida-nebula-sass-loader-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3575dab522d0a71cd76a11b1ffb22109fe401d11239b6d29d146aa34faaf0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146565 Malicious code in process-radiant-frontend-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ae85598099fed261ece31e21b8ded0a3b2032ef48793745a4f6db01c8c0470b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141635 Malicious code in development-taurus-slidev-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475374ffcdc3aaaee37f7841dea13ea7b237d1cc81ff7123f954064dc69be944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144162 Malicious code in kinetic-antares-weywot-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bff93183c6f42f2fb75cd6083a89b6b5d26427d278de47384359f61e64082ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144032 Malicious code in juno-meissa-electron-builder-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c5ab002ce179a55f0a3e800837dcb74582c94b814ef5bca6c96140113755f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...