MAL-2025-139440 Malicious code in antares-sirius-janus-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8551f142ce2cdd90b79d237c0616d99e1767b3b5b2376a82ea5dd9334bd47dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142504 Malicious code in firebase-middleware-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965718b2e69e8cd0837618529f0dff3b16fdbfef7b4cc2473c9574fa1aed806c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145389 Malicious code in neptune-wasat-deneb-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96a644a34551423aab6177cdf5b0e4f9f3518295d29ba3e44f828630f3daf27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142262 Malicious code in europa-cors-cressida-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75f1559d90c38d5d744e6bbe6e35796739c69ac812916a8ec79ec3920628f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146075 Malicious code in perseus-charon-castor-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e1ffeee62bf5aaacdb20649c0e8c2eabdeffa427fe79ee99784f0f9c3b9ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143802 Malicious code in janus-capella-chakra-ui-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc3985c314ded858cdb376cd4016649b8cf4e1fefb2e0297becb00e111d813b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147023 Malicious code in radiant-spica-aquarius-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7169f32b6920c67feca4879bb9c15b8431f75f889719ff5864c3908dc64c8ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146726 Malicious code in proxima-oberon-magellan-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0756d527441ccfc12f2511749f3ee90f35af9639574db1d5831c61e0e56502b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140960 Malicious code in commitlint-config-angular-cressida-nodejs-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51233a99373fbba970ffb051b6d35dfb5c790bf689ce0c29ae1c2bb9f36c160c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149581 Malicious code in writable-supervisor-zenobia-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50daf5591e2972fde227a78418365d4f057660287ba31db763855088858763ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142318 Malicious code in event-nightwatch-stop-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a8f3d8e3297fc8cc6ab9afcbfb139ccb0c4598a5bb32b378d352d81064bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148292 Malicious code in stop-dactyl-native-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e75d4c1b12be6cab04ee7f5ac141232ed1154e896eae56fd8e00baf86a39cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140136 Malicious code in browserify-node-config-impulse-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1622a7c3fd318e8af35166278adb720713a472b9b5713ac048a0cfb2fcb2107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145177 Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143980 Malicious code in json-prettier-stylelint-leda-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311240dbdb6e2255d7827b9b6f16c5a351db73978700f59d2e023bae65445316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139899 Malicious code in backend-yildun-fornax-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a40d1de5b24dbb448475870ce97fffe04c4ed911b649262851e279fd42ab9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141167 Malicious code in corvus-tethys-elektra-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00414bc558ede2504999ccd82b0749bf8e7114569a2c2e502313eae1f9ec0a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147923 Malicious code in shelljs-nightmare-perseus-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddeb1bc1a009697c0a34a92327586e0fafa7ac89a758b39af0e3d7cfccb123b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...