MAL-2025-148071 Malicious code in solis-bunyan-cordelia-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae0a3d4efd27bcb2d5567ef1a68ba332b10681346baf1df2f229957cc2d85f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145085 Malicious code in mocha-less-loader-axios-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bba08a828bd8ae434fdbe2f07303a911d202385632eb1fa95adf5361f03147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145657 Malicious code in nova-delphinus-npm-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129a352ca92f6102c391ab9f3a557c8fee171e8222da3bdb8bb217a365212865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141042 Malicious code in config-umbriel-tailwindcss-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b504ad2784be5eabf4f348d8bacc2bca3fca7f160530f9e1132f55d1142e1d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139924 Malicious code in bellatrix-astro-sedna-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e877580ed0a2f032f1ffa5c39273db2878f9aa5883de2cd9220fa632d0f1307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145236 Malicious code in mysql-apex-nova-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18771f3a23c620676b417659010bb8e144cd21f20e46bd086c478a0702361a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141148 Malicious code in corvus-corvus-atlas-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc931c001a969e7ec61a962f459ddf810a83bfaaf634d60d45f190c942681170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145183 Malicious code in morgan-miranda-galaxy-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918e9f0a59a05864fd4d19ced3d18f6a0a259f723e66779962e8377f9f3738e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140923 Malicious code in command-xo-ariel-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a366c080a4eaa2648f83bcb94435f3176e85614a052f24641242493394fa733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139363 Malicious code in altair-rollup-bootstrap-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf705e24bcc766ffd8b06f92a877be746751610972bad74059d45440502aab2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140789 Malicious code in cli-charon-hyperion-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ef2f2d089a90c3c3b1dde64cf335631b185d51d318006a25ec5fb1376e7a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146879 Malicious code in pyxis-juno-uninstall-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598f75f9bebce3cd6831090987228fe25f65a87b1121c7b3ef723201507cdf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146764 Malicious code in public-oberon-tailwindcss-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c4502aa3cf663ce3032721cb96acea46b65f80e204337edf55f20827f6328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139372 Malicious code in altair-xerxes-postcss-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc34032f91ad101ff579e2d9baf7bb1b8c4b5ed7dd11e110b66f1c2a838d571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142985 Malicious code in got-rocket-build-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028b8aa4f6185b93d879053833468fd2cc925423325abe587d94abab54db54f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149095 Malicious code in vega-nebula-gacrux-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8bd7530893d5854b41bd965fb6d3202ceea9182089534bf2d30a05ba208c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147302 Malicious code in request-mysql-equinox-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983cac0a9973d4c3bbd7015ea88bb041374eeaeee471fba0084e1691bb9c92ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139982 Malicious code in betelgeuse-ganymede-norma-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383622fc4616a1973794983f9948fc69040a14e146f63c10bd1309edfb61567a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140283 Malicious code in cache-semantic-release-uninstall-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9671bd2f3945f38791b47b7050c3c40a72bdf1f1d31cced49bd57b82fc1f5119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145060 Malicious code in miranda-sync-despina-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddac1488fe65453e57b62caf85d562e3e2b5eda8fc296fa78fca7fd5046bbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...