MAL-2025-144043 Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142894 Malicious code in gemini-despina-express-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7c54546c245026e1ddf3fc858471f2a6afa4c98b47cfbbeb35300357a35dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141566 Malicious code in dependencies-envconfig-bootes-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c603800bbff9b6886548978ff6df941a13ca7f23109be574c0f203af1e116c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149655 Malicious code in xenon-oberon-semantic-release-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0928c9c81d167db71db3f299e5566b1a13b3aee1d5842453431229e9ecbcf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145519 Malicious code in node-config-sequelize-nestjs-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a3fa52b67b1625918b72e412baf8bc909bf559136d77e78c49538f4a634982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139234 Malicious code in aether-mysql-eslint-config-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e723bdfeb0ecf0f7b823a7630a67f5018f37e2669440510b547ed98b4e60b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145453 Malicious code in nightwatch-achernar-cordelia-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105fc85e072ece9fd5861361f709213a2b73b7a1f06aecff21a9576fc64a26ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142934 Malicious code in global-fomalhaut-protractor-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd11327901ff2b5080328d85f1d8ef235277cd984bf86799e95dadde492694f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143565 Malicious code in indus-global-library-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd552bd8faaa141a7acca92b5937a48130fccf430c87326b0d9ebe7fd4dee40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142400 Malicious code in farout-castor-publish-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430c0c3a43774fa4675a64b073047be943c2bc19aa6beb0da328c2142b6c82c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148210 Malicious code in spinner-spectron-auriga-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9578d72dff0c43f30d887dbf39787ae56004d55f4d197d5557d68d9385666f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141560 Malicious code in deneb-ultra-process-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf421c8337829ccd7752197bb60c5b21fc674b453bfedc4a03db7644b960f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141926 Malicious code in electron-phoebe-electron-builder-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80972fc2e361fb8c4448eaa72d3719327b32fd4539f424c63b7b1874f596fcc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141350 Malicious code in csv-nestjs-mdx-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ce2ad2c09a45b1508ca38300e78b59601e949727f7b0648dca843a9241e626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148656 Malicious code in thuban-meissa-envconfig-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f0f6cece6fd5f5c781801d368a2f9c8378b13cfee5c710de8b83ff681d52e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142886 Malicious code in geckodriver-uninstall-husky-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a2b7f6230965f27a6954f78531a9e677cb5f7407f313086cab21ff0979a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145262 Malicious code in mysql-rimraf-registry-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef71af5d791cc5bae890390ec31b9e882a22231a4ef3433e9d230f40bee5a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149636 Malicious code in xanthus-restart-publish-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e458b053e98b36d56fb1199fdeb1076d014dc681e78a7f0a8b13bf328589204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149224 Malicious code in vulcan-blitz-got-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f3a91dd5ac69a536e196591b1be2a0ab84547b5642fb5b934f4f6ba732d14a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140916 Malicious code in command-nodemon-foundation-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bb7856d8b86303e4675407ea4fd7ad07065dcd9a5245aa12f3623b5f23df1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...