MAL-2025-141382 Malicious code in cygnus-style-loader-sqlite-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb98b6dfeefb2c16b296f59869bec9e0ec675ff89d8058fa5216b656f1b1331b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144731 Malicious code in markdownlint-start-materialize-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b86e7289af41e3713ee478fd25844f6004df8c4ad8c5ecdc276dcd607a7588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140539 Malicious code in centauri-transport-adonis-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb74cea296b94a2981b8e30e3363e0acbf8e54b3571f4488ba3443c158c06d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139980 Malicious code in betelgeuse-farout-chakra-ui-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5aba443e95517a5dceda66a7ac4feb006b2baf72252bb93271b21be511fc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143188 Malicious code in hapi-lyra-europa-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f82c330c425d4821d5ebf44a02c1d02a32ed95f93e53592b907f5104a831de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140641 Malicious code in chalk-gulp-helmet-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e819892ef4c38110723e1c2772e4b9b3e9b6d1168ce269f008df5ec18f81a7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148913 Malicious code in ultra-update-nightwatch-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9323a99754cd04354a83c82848390cded79ecc02a51783a2d49ac18dd9d191a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144028 Malicious code in juno-leda-pino-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8243a29c368f8aad9271546a6bf78f1aee26bfa5e3396bf2db32d0c0828de5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141435 Malicious code in cz-conventional-changelog-supervisor-loglevel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fc46ade320c9f26fbb269899c5d6682e7f1674db418e2938c9fbe50833c033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140807 Malicious code in cli-passport-iota-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1c96bbd01bc353cd4d6dd7efc63eb0ebf5878a52296eae35df15e5308f6326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144016 Malicious code in juno-antares-gravity-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555ca8e4c5a3840f4129af13db2501cde2458849cb22d07cd346ae8a5cf7067a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139613 Malicious code in astro-phenomic-yakutsk-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461199e72607e728901321d9c389e62b9c84c9d09c748e5bc6c8b32c0f881eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149701 Malicious code in xerxes-chromedriver-query-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d823f1f1e63d055ff00a2f0178f8285f6d4c179044f1e950e9003575ff523cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143613 Malicious code in init-antares-deneb-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf06fd9688c77aeaeb15ff5608ce4a1fee14ee26aa826fd990a8f62ba09ced6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142305 Malicious code in event-axios-elektra-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f727e46d13d502f5467c3574631b18795f11aaa68bdbfd4d14b263c00f2b246f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146003 Malicious code in pavo-mongoose-yaml-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f526fd620049d5e20d88f616600242a7854959f96259dc05de485d4b6b9aa1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-fetch-orbit-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4a4aec0103e82a9b92eec6da2e2f37912178bf0574e603571607567dc07da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-impulse-node-config-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90aec7674c1a5524fc2ea92edd26c3a9e2665afcaff60074fe96808a1fc7b25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-tethys-auth0-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a836a7dd86aef731e1f28ca27c1096d36492ff013274685358d2995bd5b31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141940 Malicious code in elektra-comet-kaus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19e35c748b77d4b457b3cb6602edbd409762762c7000fa53eba59cea78c3b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...