MAL-2025-146142 Malicious code in phoebe-callback-javascript-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863b7bdace3d43c148c9ec83856b8f909c3780ed176684c3d48c0716917f78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147391 Malicious code in restart-protractor-quantum-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308e46b472bebeff2efbb1fbbf96060ad0fd6c95e3541493b9965e62b60eca29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139440 Malicious code in antares-sirius-janus-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8551f142ce2cdd90b79d237c0616d99e1767b3b5b2376a82ea5dd9334bd47dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142504 Malicious code in firebase-middleware-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965718b2e69e8cd0837618529f0dff3b16fdbfef7b4cc2473c9574fa1aed806c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145389 Malicious code in neptune-wasat-deneb-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96a644a34551423aab6177cdf5b0e4f9f3518295d29ba3e44f828630f3daf27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142262 Malicious code in europa-cors-cressida-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75f1559d90c38d5d744e6bbe6e35796739c69ac812916a8ec79ec3920628f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146075 Malicious code in perseus-charon-castor-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e1ffeee62bf5aaacdb20649c0e8c2eabdeffa427fe79ee99784f0f9c3b9ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143802 Malicious code in janus-capella-chakra-ui-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc3985c314ded858cdb376cd4016649b8cf4e1fefb2e0297becb00e111d813b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147023 Malicious code in radiant-spica-aquarius-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7169f32b6920c67feca4879bb9c15b8431f75f889719ff5864c3908dc64c8ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146726 Malicious code in proxima-oberon-magellan-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0756d527441ccfc12f2511749f3ee90f35af9639574db1d5831c61e0e56502b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140960 Malicious code in commitlint-config-angular-cressida-nodejs-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51233a99373fbba970ffb051b6d35dfb5c790bf689ce0c29ae1c2bb9f36c160c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147681 Malicious code in sass-loader-package-sync-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213c0e72ea60961545ab67de0d5464389a77c618512fd25cfd5a60dca0a0660b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146845 Malicious code in pulsar-terser-publish-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3720a288da20adf950ef63d4d9940f4c6c2306532eaf5161886362bcc34b0f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147913 Malicious code in shelljs-farout-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d33e3ffe2787112ac2001ee15ede2dc2229ab29e8c9e967d06ea9ab158c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142406 Malicious code in farout-delphinus-europa-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d6579d115cb9146adff4f3d1f793b3a6e6875610ce1162be0e8336c8fe60e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145921 Malicious code in package-antares-selenium-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79c6aa8e6019e1ce2f7b72a55bb1639c2e4c68449fa2efa5c3e3be6054c8114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149350 Malicious code in webdriver-mocha-jabbah-csv-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42546448faae6a4d65c744b2b68f7c5abb36c64e33b66466ea0e22c898a9363f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147101 Malicious code in redis-gulp-lynx-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddfd9b7191654eb3387ba8d4a8c42bc2d8f476f01b89d97689ab344c8dc826f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148827 Malicious code in triton-scripts-cygnus-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fc611d6b7568136f908c9acb21ec7354043b45aff46b45717181224ee13010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144526 Malicious code in loop-geckodriver-ceres-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb5c2b79743fbc44bd02a924ba1b78e197e9329c3760c23d43ed4d5e202d670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...