MAL-2025-149105 Malicious code in venus-centaurus-meteor-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e2a7081640c6d00cd3721b0816361c409eb82efad2b5cdab73e585d1ee971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139728 Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147101 Malicious code in redis-gulp-lynx-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddfd9b7191654eb3387ba8d4a8c42bc2d8f476f01b89d97689ab344c8dc826f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149226 Malicious code in vulcan-commitlint-taurus-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d629907d31f3bf20f5b40c5e2a33a188fb1a96ef7721e2b92c263ec7667de22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143020 Malicious code in gravity-centauri-helios-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfd1d46cfb1e79a472555538c03f5c65bfa51c324508eef833111f42ef5c741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149499 Malicious code in winston-iota-pipe-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb6760a72b4e636b4de6b8a4fd38c221d2afeb5d96ad5654fa851bdd5deaddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148021 Malicious code in soap-hermes-farout-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d131eb3506f7819a2909c8e5eaef9a13d9239152771ddb1ed7a40803f726cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146002 Malicious code in pavo-miranda-oberon-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e045e078de01e3ce8c9a68defd2bebe8212d9bf603e6dc9faa91cdda033f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139928 Malicious code in bellatrix-centaurus-toml-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebdb2e51245207a285797bc56d9291bf5876105e83d7392badb56818a5c0e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142934 Malicious code in global-fomalhaut-protractor-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd11327901ff2b5080328d85f1d8ef235277cd984bf86799e95dadde492694f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140652 Malicious code in chalk-passport-xo-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c244aa0a095f7a8205087c80d788004f74f73da527c4e42c8759dda5f0d3a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144197 Malicious code in koa-neptune-slidev-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca591866a0d3e7083a8e6c41f35814d002fc420eefffdc1e60ff6f99becf00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143295 Malicious code in hercules-server-airbnb-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d39e51f8d9f7bc15046f50bb2eebff5f7edc6e9d0dba9b05ee803e679f340f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148914 Malicious code in umbra-browserify-enif-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5200f30b2a52062b1a5052b0b78a3d6eafb3df7d791ba50739e46eeec77116b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140653 Malicious code in chalk-procyon-nebula-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462f618f11a91e96022a3da2b53f414d650f924920ceb602fb0c66a5c4009269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146763 Malicious code in public-npm-leda-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d414b5a8051e12cdb7d2f02f4f7d21f8fe059fbb4aea411607ec42eb2ba24c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142720 Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140797 Malicious code in cli-ganymede-markdownlint-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f45a229869b86e2b0dfaa4ec720323de49cc23649bd8f85575228616c9843dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144701 Malicious code in markdown-pdf-ora-despina-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a575f4f0b31402aad3a9359cc6ccbee516874d462e15dfba45ffd8d8e186130e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146704 Malicious code in protractor-zenobia-npm-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fffd5854a17d7b9cefd4422eff7eba11b7fb2eeac2286356ad038845500e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...