MAL-2025-148934 Malicious code in umbra-sirius-scorpius-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7721c0109181d5cc7814e23c29a571aeedbdfbfc5a0cbed0d273bfe7ad968f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143446 Malicious code in hydra-magellan-forever-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed082a87e1a73d52a9e4f4597ac674f33c39b390062dd38d182ae7391324c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140792 Malicious code in cli-dactyl-restart-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e4eca5980d748e273b5ae71572bacf25be9a4a96d84712a0984c38431372d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148050 Malicious code in socketio-eris-delphinus-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc71ddc3dcf1582b910c6e15c26a077a5a4e6f1e21b3f00fd3f1b8e02ee14dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146396 Malicious code in postcss-loader-galaxy-kaus-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5605ce3f0a50e3f5b0c6a7049fc8fd2af1a76c911b137becc0bba57bb16761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146564 Malicious code in process-prettier-plugin-markdown-ganymede-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa72f918996786d3235c35e1d15645cdc1aba81c886ed26e2d88453654fca1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145423 Malicious code in nextjs-procyon-postcss-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e01c23ae81811c86732763e0d2d2158dde05a07a044c0da8c5f141775f2224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149655 Malicious code in xenon-oberon-semantic-release-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0928c9c81d167db71db3f299e5566b1a13b3aee1d5842453431229e9ecbcf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147547 Malicious code in run-script-metalsmith-init-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91de0853403d774154829e0e027f6d2027c5991560bd939c3f3c8b030fc3fb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143816 Malicious code in janus-magellan-quark-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696fbfcd478350fa5c64c1d68b7c5502ad6df5cf972b8cf3e69c7f0d811eb85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141236 Malicious code in cressida-loop-regulus-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff2ef0ff2ed716a9444c8d00976ad31a124b97aeeffd1954863b551d3f09866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139658 Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140506 Malicious code in celeste-forever-bootstrap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2664a9a6197e54174e920e47bfe1732ec24d3916eb0c990bf54ccfbe187e4e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148840 Malicious code in typeorm-comet-carpo-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3105ee9bb6ac739ae73518d846f54ac4063dc0314d1af323b3ed40306377a498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146218 Malicious code in pino-foundation-norma-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49315bb63638761a8dbd289a4cf8e22369803d71be237d59224742f28f2b071c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149518 Malicious code in winston-ophiuchus-native-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936180fb7f70ca447bdaa3801548797677e77685b3a6bc1e6ae6806bb2207fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147956 Malicious code in sirius-html-webpack-plugin-izar-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5b12b6bff5a1d345f252be0db66d506247fc87ad6a553fc02b7a9aa498a52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149312 Malicious code in webdriver-manager-chariklo-aether-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565f76f2b1e7bfaeedc6b3a660334f8e11e8a8b25d0bc5006c3522ef35a227a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145372 Malicious code in neptune-phoebe-geckodriver-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5772d139b81ac3c704466a814b41007e8de96f4be277d3ee86500c48f6a33ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141129 Malicious code in cors-mdx-spica-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a41993407581197ea7067a764303b3c1766883415c39928ee3651e5278e64f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...