MAL-2025-146344 Malicious code in polaris-google-proxima-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4006ff9461391921d89545f31a28eb6b57e4c3a88fd6672ac61247b99137b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146843 Malicious code in pulsar-repository-uglify-js-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad346edfd4edd2e29551090c05102d6a12d79b3fab9648346b880d2e34714ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141860 Malicious code in eclipse-umbra-levels-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56bb19450ef3f74d25211f36a45644b45d6cfb61738d51e244ec17fd1b86d780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143144 Malicious code in halley-grunt-firebase-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149182 Malicious code in vortex-halley-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0948e83a9d2253da18941421faf9239c6601e7f941de17859238be90a78b748d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147110 Malicious code in redis-module-prompts-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7746c84f9eea454bb717d63fee8f847784b838bc466466fd555a66c2c65e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144830 Malicious code in meissa-prompts-winston-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8d9301673d88daa55f7e71755ffdfb1c684e84fb6bdca24e668e65b18272ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144357 Malicious code in levels-node-config-nodejs-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d94739c23d7786f1a521acf68d3278bc133788d3b5c829c95dd3cdd53639ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144964 Malicious code in middleware-schema-venus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c9d42a35eecf79615d3e6a383a4660f2e51cc22fd1bb17616a609764d1b1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149331 Malicious code in webdriver-manager-ophiuchus-magellan-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3c2be086a4c9668e4e502af1496a91f545d08b56e15e92d6b9c36a59b5b41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143303 Malicious code in hermes-callback-equinox-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9eeae41056e9ee731f753077af2b0161fbdde4dba399081a1dad649ae59510a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140559 Malicious code in ceres-configstore-jwt-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148234 Malicious code in sqlite-orbit-xenos-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c86265633b4b5b2fd5f73dca2afde3e2809e8e36c6b6783188ef1057a4bb075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142355 Malicious code in exec-nuxtjs-antares-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3850f7fcebd9ea546cc4cf330ad1c8e2c63e90b43b3345492b1988fd55788ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147364 Malicious code in rest-rimraf-auth0-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308cc6969d5c0fd9d5fb4f300fda62ca7b42b335cd50278fad17ece90c2621cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149079 Malicious code in ursa-virgo-less-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a0a6b7d9a44c8952af3e3dbb40af74f2ceedec34b367f51a806d743e9bc64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146840 Malicious code in pulsar-process-postgres-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c5e2bbe84db3411a75161d881cd19b7ee5d38d0119381a3d89f41921e2bd74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142123 Malicious code in equinox-hermes-farout-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3361f0ac777170ccd3723923d498871e904a5eded9e7f011447fd9db27fa1445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143806 Malicious code in janus-elara-draco-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d02531fca99bec533cae3ffbff32de807805bb87a92ebfd783d35ddf8013a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146469 Malicious code in prettier-ini-babel-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b566f92ee775fdadbe70403772b8454710e9712622c79844d941ad37fd3875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...