MAL-2025-149119 Malicious code in venus-procyon-test-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb79d6f006a83101348957e94c03ac8895c614f12e474368f72140f44f2a2491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149647 Malicious code in xenon-jabbah-enceladus-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67a932f8103657216151be707fe26add8546a8003466cebcb7dfc30570c7fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-gatsby-figures-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861fb5329fb77e004899efaba3a94f1383f864ba21060609716072f58bf494ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140916 Malicious code in command-nodemon-foundation-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bb7856d8b86303e4675407ea4fd7ad07065dcd9a5245aa12f3623b5f23df1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146895 Malicious code in quantum-avior-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144070 Malicious code in jwt-bulma-private-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6440b82a3e373f0f05f339f463a887f1b1c5f60136c927d1d72f65b011de2bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144204 Malicious code in koa-rate-limiter-terser-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be96c07650b670c76bd394a0fd674f3357b792a7afc500f19b9fefa6e8625b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148889 Malicious code in ultra-bunyan-cygnus-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e2e41abf9245703a734f0eec2e691c89b7d67a1ef3f53628e3b404f88f4d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140539 Malicious code in centauri-transport-adonis-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb74cea296b94a2981b8e30e3363e0acbf8e54b3571f4488ba3443c158c06d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139318 Malicious code in alphard-avior-electron-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d2c468b04a822b76a02641754e6a432183303be1da6df9eccbe3b7fde12fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144526 Malicious code in loop-geckodriver-ceres-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb5c2b79743fbc44bd02a924ba1b78e197e9329c3760c23d43ed4d5e202d670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147023 Malicious code in radiant-spica-aquarius-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7169f32b6920c67feca4879bb9c15b8431f75f889719ff5864c3908dc64c8ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139664 Malicious code in atlas-uglify-js-dependencies-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c01fe1d39d88bf4cd5a8c1ea901406f329f7b4aba7ecd8aabf15ba9c3ada4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139804 Malicious code in await-proxima-mui-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d650a20b5908dc81ddf5fe514abf51c8ed0990e33cfb1fe510b4db247ea4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139737 Malicious code in auth0-bellatrix-flare-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e8fb78cbfe2b9703119843bcf9dc9fed3a416b3af62cc1f848ee7ed6c007a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145519 Malicious code in node-config-sequelize-nestjs-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a3fa52b67b1625918b72e412baf8bc909bf559136d77e78c49538f4a634982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140511 Malicious code in celeste-juno-restart-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e323730ed431ba0402402ddebb72abbf45522ea92c6910ada2bf7ebe2a01509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-apex-repository-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2ba01c12acb6ffc65197209a2b8e08fac7620715ef2f20ae130393a7ba497e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-nightwatch-levels-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b35f4e13724988b9b8b6e19d6cbd6aa7acf2a8df370570ee8ea0c28c6f065c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-nebula-fornax-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c11c5e234551c51c428218f768448a985e46be8ea1ada6b02335b438eb02b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...