MAL-2025-146046 Malicious code in pegasus-publish-mongoose-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ceca5bf5ad3eeb9dc535efb9f2ed64bca85aa519539a639405784791be1baae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-andromeda-spawn-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a5dee896748b52c2d7d49f76d856e114537060fe2f8e84d7e7a1bba31b762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140650 Malicious code in chalk-miranda-stream-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49e37c6859cc4ea8aaa71c43a84df6a1e639a482bc71eac042856a46b547299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143274 Malicious code in hercules-ceres-jest-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968504ba2b4fd0f91b0925a1a6f37f0f562d4535dd22ce439ac50ad7e2326765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147342 Malicious code in rest-colors-xenon-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea9c8aeb5c94be268f5eb954b7f3da9be1607c0683a980ae34c42e812feb1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-winston-html-webpack-plugin-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533d17b064934bf10be2328e4f60324b7af8f0958bb35f3d23e89346174c51ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149328 Malicious code in webdriver-manager-nashira-loop-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f6a04ec806bb992913d1853766b213c4a81232fe66336bf4acdf188e33e9c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142305 Malicious code in event-axios-elektra-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f727e46d13d502f5467c3574631b18795f11aaa68bdbfd4d14b263c00f2b246f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143204 Malicious code in heka-exec-terser-webpack-plugin-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459a8911d404ea550d39c9a03962c94d442f59f3731ba158658f93ea0e9d1729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148020 Malicious code in soap-fornax-await-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7f910b1a0e23383dbd2120e5b535de66e98328775a099283703bbb8bb6264c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143693 Malicious code in io-charon-dactyl-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb076b8a92826ac002b2ee673f2234d7610855e9af4e253a5bd890350ac07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147550 Malicious code in run-script-ophiuchus-cors-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a09fd213361677312c1ca5e7462ebe175bcc01115ff87099c130dd7a70fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148787 Malicious code in transport-dynamo-hyperion-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e02a9b6950f1c0062ca81f751201a1d3e82b793e604f56bfe93c574fe06b780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-wasat-blitz-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9636ce05fea538ac7059065ef9729dccfdc9cbf9fce39f7ae482e360c11bbc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145453 Malicious code in nightwatch-achernar-cordelia-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105fc85e072ece9fd5861361f709213a2b73b7a1f06aecff21a9576fc64a26ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148840 Malicious code in typeorm-comet-carpo-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3105ee9bb6ac739ae73518d846f54ac4063dc0314d1af323b3ed40306377a498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143517 Malicious code in ignite-jovian-carpo-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5489fcc6a14ec6966ae4d1643fad8c37bf6bca505d7659f928e3f7964fad9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143305 Malicious code in hermes-ceres-bellatrix-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 688726f6a9432849088507141b6797c9aacb01ea5b185bde1b2fc541e0ff9c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142391 Malicious code in express-superagent-javascript-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b794550053245b66618b7061c10440b97b535bc4dad030d638689510877234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140509 Malicious code in celeste-impulse-private-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561829010b1dd2399a0da8cf1d3b0989a0adff576be915b99df64aeae7651dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...