MAL-2025-139497 Malicious code in apollo-bulma-polaris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692d8948eee5220a89db98305c0c5b8563d44e1e8f148eb621bcc3b1f6e1b915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145822 Malicious code in ophiuchus-janus-bunyan-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1707429e67eff91832e0f5995f787179dfc97689e79ba2cd9d550934e81e0272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145183 Malicious code in morgan-miranda-galaxy-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918e9f0a59a05864fd4d19ced3d18f6a0a259f723e66779962e8377f9f3738e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144530 Malicious code in loop-ophiuchus-fetch-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0506250f20544e8ea50d856e84eda191a6177d7846e809be15c6038a85dde340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145285 Malicious code in native-backend-dotenv-safe-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781f6d6927036e8ba7935aa91fcf468079fe5edef66c51944922fd9b13d986e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149518 Malicious code in winston-ophiuchus-native-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936180fb7f70ca447bdaa3801548797677e77685b3a6bc1e6ae6806bb2207fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147152 Malicious code in regulus-nextjs-chariklo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37f8e254bb80afe443dd1f2073de683b7d930ca6ecc89c98dab8633f4cf6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149746 Malicious code in xo-despina-uglify-js-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66cde12dcb5e6838781448ec1c940ccb37a0d91ed1a28aafa68eedd0978d2fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148880 Malicious code in uglify-js-quito-ursa-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaadc495679e60a19ec8445196bd4b7acb163dfea8b86c1a624c45ecead0fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143759 Malicious code in izar-mdx-csrf-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd48dce86c37a361649e24f14a11f5ae82095ea0c041fb843b7deb540d94869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148724 Malicious code in toml-uninstall-acamar-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3712e1a9327cc0b6123842ab0d3fd495b50d3e0e9e098c7eeaf5593e748799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139786 Malicious code in avior-solis-grus-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1bdfdc7bb97c3e6f4552241ddd6ae1a7be05ef2b820b1547391c9765a70c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139690 Malicious code in auriga-stop-superagent-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02492b37e28b9d77ad388dd39b50a704ff7444051a21fa3cce80a1dda08ef6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146022 Malicious code in pegasus-csv-concurrently-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9940ea961ce5eeccf2070e02920ddc683559e1cbee364ddf03b26b769f0a03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142940 Malicious code in global-lacerta-sagitta-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aab090a06890abad34f96c9d0c014ede763e63fe2ccc634f3da5a8b7fa2a1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142167 Malicious code in eris-command-rate-limiter-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7abe993bf638dbe98c04283aed6d10f5a2bb33bcdb8c09e606063d2c0a09e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141957 Malicious code in elektra-zenobia-webdriver-mocha-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123acbb883945a9247d7d3d21ef8b7f1a1e3cd9362cb574c9125374cd3afeade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146742 Malicious code in proxima-soap-nuxtjs-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfef6f6fc5dc73022bb710eebac77b0e7019e7bc797f9aa9f8c2716a3683d588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148299 Malicious code in stop-node-config-zenith-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae899ccb8291de7f8de581daee9c0b626457329723065edf32d96a66cbaad7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144541 Malicious code in loop-zenith-chromedriver-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015455086584d741f34b2a1fd658c8c32248b4fc6c94dc2fcca14444c7b4c927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...