MAL-2025-149182 Malicious code in vortex-halley-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0948e83a9d2253da18941421faf9239c6601e7f941de17859238be90a78b748d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143303 Malicious code in hermes-callback-equinox-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9eeae41056e9ee731f753077af2b0161fbdde4dba399081a1dad649ae59510a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143799 Malicious code in janus-aquarius-perseus-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b3084860f2cb8217adf7746c16acd98753704e6c2ba7267ba93cab716f9bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147728 Malicious code in scripts-concurrently-grunt-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90713be5a6b07f12ea3a0a3307259d9d4cca964d591bf7ce254508064f384e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141860 Malicious code in eclipse-umbra-levels-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56bb19450ef3f74d25211f36a45644b45d6cfb61738d51e244ec17fd1b86d780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147110 Malicious code in redis-module-prompts-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7746c84f9eea454bb717d63fee8f847784b838bc466466fd555a66c2c65e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149331 Malicious code in webdriver-manager-ophiuchus-magellan-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3c2be086a4c9668e4e502af1496a91f545d08b56e15e92d6b9c36a59b5b41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140626 Malicious code in chakra-ui-rigel-juno-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc1b03abef0e3356b99e70b0a43bc51cce4025f472502f9ccfb1d25af92caf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143806 Malicious code in janus-elara-draco-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d02531fca99bec533cae3ffbff32de807805bb87a92ebfd783d35ddf8013a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142355 Malicious code in exec-nuxtjs-antares-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3850f7fcebd9ea546cc4cf330ad1c8e2c63e90b43b3345492b1988fd55788ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146840 Malicious code in pulsar-process-postgres-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c5e2bbe84db3411a75161d881cd19b7ee5d38d0119381a3d89f41921e2bd74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147364 Malicious code in rest-rimraf-auth0-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308cc6969d5c0fd9d5fb4f300fda62ca7b42b335cd50278fad17ece90c2621cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142555 Malicious code in fomalhaut-ultra-google-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fcbc513c0a9967340a8bd1620fc65e6e92e59d328195923c5bc0665411f5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146344 Malicious code in polaris-google-proxima-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4006ff9461391921d89545f31a28eb6b57e4c3a88fd6672ac61247b99137b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149427 Malicious code in websockets-solis-eslint-plugin-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127e7780d8d19e0da2569909fab63b7acd7c8241049ab9c677f1c1aa30604d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146469 Malicious code in prettier-ini-babel-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b566f92ee775fdadbe70403772b8454710e9712622c79844d941ad37fd3875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142123 Malicious code in equinox-hermes-farout-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3361f0ac777170ccd3723923d498871e904a5eded9e7f011447fd9db27fa1445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148234 Malicious code in sqlite-orbit-xenos-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c86265633b4b5b2fd5f73dca2afde3e2809e8e36c6b6783188ef1057a4bb075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144830 Malicious code in meissa-prompts-winston-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8d9301673d88daa55f7e71755ffdfb1c684e84fb6bdca24e668e65b18272ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149502 Malicious code in winston-jupiter-node-config-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4eee41e3597118a0d7e5e4045973e1ab46a0ea07c8f35e8a7f01da69e57b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...