MAL-2025-148045 Malicious code in socketio-auriga-native-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8108a1e0499fd22a3c86ad23fc52c308e4e96fadcc54d24cc92a56d1dd37e205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145292 Malicious code in native-phoenix-antares-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956a174c13c0490bf7e9a7ef5873ebdf96a8566deabda32f029f8357f56acc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139924 Malicious code in bellatrix-astro-sedna-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e877580ed0a2f032f1ffa5c39273db2878f9aa5883de2cd9220fa632d0f1307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145657 Malicious code in nova-delphinus-npm-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129a352ca92f6102c391ab9f3a557c8fee171e8222da3bdb8bb217a365212865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149095 Malicious code in vega-nebula-gacrux-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8bd7530893d5854b41bd965fb6d3202ceea9182089534bf2d30a05ba208c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145060 Malicious code in miranda-sync-despina-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddac1488fe65453e57b62caf85d562e3e2b5eda8fc296fa78fca7fd5046bbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141087 Malicious code in convict-rate-limiter-semantic-release-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142892 Malicious code in gemini-build-regulus-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0954309485e0116cd28f04502a67aedc87c6618aea4622ff3fe8d3b154f2583b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148960 Malicious code in uninstall-inquirer-vega-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8846698d2269baaf706f6c548dd31f7d4b3192fef4ecf20829d9cc8bbac472a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145094 Malicious code in mocha-transport-indus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d4f63add009e7c55ca249a44aef7ef151f3a1806949fde2c2fc4f7f2e01da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147175 Malicious code in rehype-lyra-iota-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14a65634f2c9482704751a1262d96626592d9ab3dcef6f375979e96c07ce110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149164 Malicious code in virgo-nuxtjs-markdownlint-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456efc4ea80f59d38ec571a75a5f9b728150a46429cd2c67f7950fe7eaeb3262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147813 Malicious code in selenium-sirius-reveal-md-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab775aa8e55d69538292e9062a9c626861ad9842d7b789d92e8e81b5db22a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147905 Malicious code in server-sagitta-andromeda-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0600670352921b41432463070398d336c20e91955a99505b65681b64d4a2630e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139822 Malicious code in axios-concurrently-loglevel-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34761219db83109baffd93ff8ab4687bdfcd514a0d33561151bdc2f3c0306bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146901 Malicious code in quantum-deimos-colors-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a78a3e303545fe7a4cf7c007b28503496a490a019602bff17224b9d992cec9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148914 Malicious code in umbra-browserify-enif-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5200f30b2a52062b1a5052b0b78a3d6eafb3df7d791ba50739e46eeec77116b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146853 Malicious code in puppeteer-ganymede-hermes-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e3398eec782d88542539c931720b191039bca6ee9204f7b0908fff31927037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149710 Malicious code in xerxes-node-sass-mira-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5c0088d5c750f8fab1a2dc599d682e4ffebe0cebbc23360f042a0267bb5031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144453 Malicious code in lint-staged-despina-async-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7945446fa469f4ab212c7c15865d5e21bc2ebbaf53d61f9368e81a8b86fbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...