MAL-2025-148198 Malicious code in spinner-grunt-umbra-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267a2e9b1039dd9ab3920b5fb7f04b7fdcf6aa26b2ed85a9869cb6966293b4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149105 Malicious code in venus-centaurus-meteor-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e2a7081640c6d00cd3721b0816361c409eb82efad2b5cdab73e585d1ee971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143098 Malicious code in grus-polaris-cressida-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ba26fa4dbb1e602577b4133c013d196b716317ba0da07038cef37f6f9ff5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148787 Malicious code in transport-dynamo-hyperion-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e02a9b6950f1c0062ca81f751201a1d3e82b793e604f56bfe93c574fe06b780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143305 Malicious code in hermes-ceres-bellatrix-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 688726f6a9432849088507141b6797c9aacb01ea5b185bde1b2fc541e0ff9c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148934 Malicious code in umbra-sirius-scorpius-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7721c0109181d5cc7814e23c29a571aeedbdfbfc5a0cbed0d273bfe7ad968f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149269 Malicious code in warp-inquirer-perseus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f29e1ff123256f07772c6db1b9c0a96b1666d716ec3050dc1415fbeb06ab05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147392 Malicious code in restart-proxima-apex-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c4589dfc1f8737a6c828930b440b726da1d49dcad6a62b26fd2aa9106d3546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148122 Malicious code in spectron-protractor-nconf-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4dfe990dbd0d65d1f78fb921819fad3f8ebe875a224734af2b927d4d3e8d38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147368 Malicious code in rest-tailwindcss-hyperion-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e22a4a72ba894fba6775542bbfed8bdd8794b17d73198abd401b0c381988505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148002 Malicious code in slidev-convict-heka-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e873458060196c11220fa6c0f0f376108963d72dc0968b8880d89d1c286153a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148570 Malicious code in test-eclipse-prompts-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565adc0c7206777686a96baffa9365969a46e1d2b689e8a2e2a4253039f35fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145402 Malicious code in nestjs-rate-limiter-css-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dcf6a5854a71a4f6e5542d6f0514ed512f06a1223cbdf4b3a1eda546dfe031d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146960 Malicious code in quasar-rollup-adonis-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac168b880ae287e65f1638c1badd728ba959d9184a9c4540169154dec70e52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146210 Malicious code in pino-castor-titan-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8380998eb6ab5ab3193a5728bf932f73e6aa50cafd200f74fa9f30a8daf4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147989 Malicious code in slides-loopback-remark-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e43754ce3218fa51102acb6493bd334554e196c1386c6d59eef679f5f45b7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140582 Malicious code in chai-antares-gravity-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78991cb9ff54d1247228b1af1b38ec21552073b5ade063b1ff9372b67c59ee8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148474 Malicious code in taurus-module-style-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f458ad29f3855a38854e4aee7cb2e60dbad295cb3fa1b3daef65ccb8840a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145090 Malicious code in mocha-private-cassini-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc82190d8b17d1f57a30e12ed75fde26ae8e9fb09897bcb4bc0cb303e68b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-airbnb-hexo-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3d1200b450aaccf441f8e19782c2d285ed44b037d7fef865e763c46c7b7d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...