MAL-2025-149551 Malicious code in wolf-jabbah-axios-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb514dc69b97db26c0206a29a61c0a101baaab726b1e5cb364a3d76a6c7a51de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148258 Malicious code in standard-rimraf-phoebe-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234b67294a0025692db16e4ca6d29b66713ad714b9107ebaac5b7d9fbf2fca22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140055 Malicious code in blitz-pegasus-convict-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9efd04657104cfac73c4bf700c254831335ec418854cb990760a41449745b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139818 Malicious code in axios-andromeda-dione-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab59a545a758f3f8ded31ec284cb9f47a3b3ca66dc254eb9f6cdd08d4c65ccb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140543 Malicious code in centaurus-enif-registry-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6ac6a6965728f64abfb8f42a82d75becc9f9347d7f4a9e8279711d36bb478a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144865 Malicious code in mensa-tethys-local-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2701a23daa25c07ca722a238b8a79644ea9150a243c248fffb23841bbcf42f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149654 Malicious code in xenon-oauth-framework-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dce1782e99ecf2a9a1ac060d68897c127bf998539a101ddbcb4e03d4c4e560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147326 Malicious code in resolvers-hydra-adonis-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9766e27ad16780af1cc83b26d319905d9c6ffcf233d0efe0840ea32a88799f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149109 Malicious code in venus-europa-phenomic-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703167ef60682806e489086aa92d5992747677f48f9acf863b6490bb42e7068c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147719 Malicious code in scorpius-umbra-electron-builder-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862a2349ffda24c475fb6b50662ed3b2a243d7c9031ce530c284e46c5f71a68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148471 Malicious code in taurus-lint-andromeda-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22aede6c54725dc663745ea8702cae95b5545630e7dc96af364471615c2b017c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143857 Malicious code in jasmine-meissa-soap-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6109c4527fbe0c61110df548c7dd0fedf4f49d33856b8df215dc9363bbd0b512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139373 Malicious code in andromeda-chromedriver-async-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce2b8cba230c4a88157854affde9df2ec485276339955afe9e2c8525d5a40abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140749 Malicious code in child-process-init-winston-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e17715ecb74d661f9d84520affc87ae678fb865ac45f238a2a0c2a5412c477f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144667 Malicious code in magellan-standard-izar-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6c3df629430f25effc5f60978bc3c26c40d1aeba741761cbad04b32aefacf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140270 Malicious code in cache-eridanus-auth-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ca0649729d1dff4f07747f531200bc22904d80ebcbccf330d3a9a9072f5251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145451 Malicious code in nightmare-ursa-non-blocking-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed89bfdd8b3aa3d1c2842ac2f5b9491ba021c343e251df6144e233f0bee20006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143762 Malicious code in izar-pyxis-wasat-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9279999eb82f4ebefafb993331a9b1d9cc9bf542060779f1d7b327051dbaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145188 Malicious code in morgan-typeorm-auth-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5870522f5a30b4506aa63c90f624d599dce2981d4b91b365a803fc93825eb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147624 Malicious code in sagitta-triton-rehype-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea9e88f146d6b0efe702ff462980629d348841c722177bdf682d3a2766d719c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...