MAL-2025-140059 Malicious code in blitz-regulus-phoebe-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c368bd40559bad0ddf703829fa576b4ca7c291b37720efd08a9211e177fc52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141519 Malicious code in delphinus-io-aldebaran-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d821ef98f08a1c0be384e1163096d7db814e10ae4f42e0e576ae0d3a45c7e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148960 Malicious code in uninstall-inquirer-vega-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8846698d2269baaf706f6c548dd31f7d4b3192fef4ecf20829d9cc8bbac472a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140687 Malicious code in changelog-taurus-registry-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53159aea5ce380db3b88eb4598bc7c2b20a6594b39b1036b1ee6c316805d286f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144435 Malicious code in lint-dione-publish-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff882e7626745936fd70d55ac96b8390b9cd80e97eff19f2a3bb2a37cf345a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146373 Malicious code in polaris-sync-procyon-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139259 Malicious code in airbnb-node-sass-kastra-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03389f3a7bdd7c333dc10a664884142a887b5dfa396f74e0d333e8b182335600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-react-bootstrap-meissa-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf93686ac0c5d7e54ffaed0b8ea0486e846b54a3e4cf06bca794c4275d878695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146604 Malicious code in procyon-materialize-non-blocking-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bc6c2ca4e1c5683d6cd7b60e5b027a62c82412bb256bc38dc1ef4c888bad6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144167 Malicious code in kinetic-delphinus-farout-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f370a395c2d47ea909b67d7db2433dbcdc997442f2a384b050ea0c2e241a773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143098 Malicious code in grus-polaris-cressida-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ba26fa4dbb1e602577b4133c013d196b716317ba0da07038cef37f6f9ff5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142457 Malicious code in fetch-socketio-cosmiconfig-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b66b5bd3a3884e56eb328697e599b1fe4d7b8ef780cba66f461c63cb2cac129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145094 Malicious code in mocha-transport-indus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d4f63add009e7c55ca249a44aef7ef151f3a1806949fde2c2fc4f7f2e01da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141626 Malicious code in development-nova-carpo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738f95f8f7afe379b25953df0583441baad9376a582dee727d760d2493dda163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146366 Malicious code in polaris-shelljs-jekyll-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de091a3968f27ce74c81fbe514c2fa98c46ffdd8b63a1a10948c72140895732c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147510 Malicious code in rollup-plugin-callisto-figures-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140103 Malicious code in bootstrap-fornax-miranda-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b002a965cbaac43533196a62f03eb1874cd008b25ff59bba86a86282f9f535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140500 Malicious code in castor-yonder-prettier-plugin-markdown-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1834d70d079be8ad79fd0bf3df1d3b2bfe610236fefdcba9c92d247ca41bc301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140765 Malicious code in chromedriver-deneb-auriga-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195fea34eacdb423bea8abd3996ce12a0dbdd074896f23f92547b9d6e20087bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...