MAL-2025-149601 Malicious code in xanadu-miranda-fetch-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141771 Malicious code in dotenv-safe-postgres-perseus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118c548fba36106c65ab5a4047e37654324785d2a7b091b8c04a743d9c47bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141567 Malicious code in dependencies-equinox-despina-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c683b2a7d937899f8905e90cc2f46225ee2a5764154d6b399d88a67ce7d677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141855 Malicious code in eclipse-meteor-stop-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670b62a4cb55228c20ad958da47c271f028b2a55a608b305e28381a75d5acb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144243 Malicious code in lacerta-hyperion-cors-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-got-gatsby-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1c2515faa0661243dc07aa0921b51680f5c2e85108869b41be9125f94fd56c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140882 Malicious code in comet-mutation-hydra-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf23dea65fac62655d4797e17e72c4af1c8440834c87f6901137f94fba8bf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145372 Malicious code in neptune-phoebe-geckodriver-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5772d139b81ac3c704466a814b41007e8de96f4be277d3ee86500c48f6a33ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-sagitta-geckodriver-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b523cf7d0a175f98644bd91f959c7e5a27bdb950d4711d17f223e8534635c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140765 Malicious code in chromedriver-deneb-auriga-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195fea34eacdb423bea8abd3996ce12a0dbdd074896f23f92547b9d6e20087bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144701 Malicious code in markdown-pdf-ora-despina-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a575f4f0b31402aad3a9359cc6ccbee516874d462e15dfba45ffd8d8e186130e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146366 Malicious code in polaris-shelljs-jekyll-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de091a3968f27ce74c81fbe514c2fa98c46ffdd8b63a1a10948c72140895732c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-achernar-xo-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a12a3d9edd9de56818674de53b88391cd2453fe22b06576d063f3b92e289a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147145 Malicious code in regulus-electron-builder-toml-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb363ff17fae4c8c782d0db9a96bc1aa2a403f59fa362575ea111d739766e891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-centauri-enif-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a679174385d73c39620a1a37cbb39b69e452416d7479c489f935ba04496cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141124 Malicious code in cors-ganymede-charon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86ca30bcc45566802cc10a865760b2d98563b06c250bedde4d30bb7e523d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146742 Malicious code in proxima-soap-nuxtjs-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfef6f6fc5dc73022bb710eebac77b0e7019e7bc797f9aa9f8c2716a3683d588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148827 Malicious code in triton-scripts-cygnus-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fc611d6b7568136f908c9acb21ec7354043b45aff46b45717181224ee13010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-non-blocking-mysql-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1d58c5a5d0d5e690108078ebedab4b4ccd7530c04b5a21e5335aaa9bcbc593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...